Small business cybersecurity
Practical protection against the threats small businesses actually face: phishing, account takeovers, ransomware and lost devices.
Most incidents start with something simple
Small businesses are common targets because they're often easier to get into. Most incidents begin with a stolen password, an out-of-date device or a convincing email, not a sophisticated attack.
Many of the most effective protections are already included in tools you pay for, but aren't switched on.
What's included
-
Microsoft 365 security configuration
Security settings reviewed and tightened, including email protection, external sharing and older sign-in methods that attackers rely on.
-
Multi-factor authentication and account protection
MFA on every account, with sign-in methods that are hard to phish and easy for staff to use.
-
Identity and admin access reviews
Who has admin rights, which accounts are no longer used, and what former staff can still reach.
-
Endpoint security and update management
Computers encrypted, protected and kept up to date, with reporting so gaps don't go unnoticed.
-
Security assessments
A practical review of where you stand, with a short, prioritised list of what to fix first and why.
-
Australian guidance
Recommendations based on the Australian Cyber Security Centre's Essential Eight and small business guidance, scaled to the size of your business.
What to expect
The focus is on getting the foundations right so the most common attacks don't work: strong sign-in, up-to-date devices, sensible permissions and backups that can be restored.
This is hands-on help from one experienced person, not a 24/7 security operations centre. If your business needs round-the-clock monitoring, I'll tell you and help you work out what to look for.
Let's sort out your IT
Send a quick note about what you need and I'll get back to you within one business day.