7 IT basics every small business should have in place
You don’t need an enterprise budget to run reliable, secure IT. Most of the costly problems we see at small businesses, like ransomware, lost files and hijacked email accounts, come down to a handful of basics that were never set up. Here’s the checklist we start with.
1. Multi-factor authentication on everything important
If you do only one thing on this list, do this one. Multi-factor authentication (MFA) means a stolen password alone isn’t enough to get into an account. Turn it on for email, Microsoft 365 or Google Workspace, banking, payroll and any system that holds customer data.
2. Backups that have actually been tested
Having backups isn’t the same as being able to restore from them. A good rule of thumb is 3-2-1: three copies of your data, on two different types of storage, with one copy offsite or in the cloud. Then test a restore at least a few times a year. Remember that cloud services like Microsoft 365 need their own backup too.
3. Automatic updates for computers and software
Most successful attacks exploit known vulnerabilities that already have a fix available. Make sure operating systems, browsers and business applications update automatically, and replace devices that no longer receive security updates.
4. A password manager for the whole team
Reused and shared passwords are one of the most common ways businesses get breached. A business password manager makes it easy for staff to use strong, unique passwords and to share access safely when they need to.
5. A documented onboarding and offboarding process
When someone joins, they should get exactly the access they need on day one. When someone leaves, their access to email, files and business apps should be removed the same day. A simple written checklist prevents forgotten accounts from becoming security holes.
6. A business-grade network with separate guest Wi-Fi
Consumer routers often lack security features and stop receiving updates. A properly configured firewall and business-grade Wi-Fi, with guests and personal devices on a separate network, keeps your business systems isolated.
7. Knowing who to call
When something goes wrong, time matters. Keep a short document listing your key accounts, vendors, licenses and who to contact for IT problems, and make sure more than one person knows where to find it.
Not sure how your business measures up? A technology and workflow assessment covers areas like these and gives you a prioritized roadmap of what to fix first. Where specialist security work is needed, we help you find and coordinate the right people. Get in touch to talk it through.