SMBs are frequent targets of cyberattacks, precisely because they're often less protected. Here are ten basic measures.
1. Turn on two-factor authentication
On email, banking and online tools. It's the most effective measure for the least effort.
2. Use a password manager
A long, unique password for each service.
3. Keep everything updated
Systems, browsers, software, website. Turn on automatic updates.
4. Back up
Regular copies, including one offline or off-site.
5. Train employees to recognize phishing
Fraudulent email remains the most common way in.
6. Limit access
Each employee only has access to what they need. Remove access for people who leave.
7. Secure your Wi-Fi
A separate network for visitors.
8. Encrypt devices
Laptops and work phones.
9. Verify unusual payment requests
A change of banking details received by email must be confirmed by phone.
10. Have an incident plan
Who to call, what to do, how to notify. In Quebec, Law 25 requires you to keep a register of confidentiality incidents.
The Canadian Centre for Cyber Security publishes free guides for small organizations.
