Cybersecurity basics for small business

Enable MFA across every account that supports it, especially email, banking, and any cloud storage.

Make sure backups exist for critical business data and are tested, not just assumed to be working.

Train staff on the basics of phishing and banking scams — most small-business incidents start with a single clicked link or a convincing phone call.

Keep software and devices updated, and remove access promptly when an employee leaves.