Cybersecurity explained for small businesses
The tools and habits behind a protected business, explained without jargon: multi-factor authentication, passwords, backups, EDR, email security, updates, Wi-Fi and more.
Antivirus is not enough: what EDR adds
Antivirus and EDR do different jobs. Here is what each one catches, why modern attacks get past antivirus alone, and what a small firm needs on every computer.
Read articleBackup gets your files back. Business continuity keeps you working.
Backup and business continuity solve different problems. The difference, the two numbers that define what you need, and how to decide.
Read articleRansomware and the project deadline: what design firms should prepare
Architecture and engineering firms depend on large files, specialist software and fixed deadlines. Here is why that makes them a target and how to be ready.
Read articleSIEM and MDR, explained for a firm without a security team
What security monitoring does, how SIEM and MDR differ, and how to tell whether a small professional firm needs them.
Read articleVulnerability scan or penetration test: which does your business need?
Clients and insurers ask for both and firms often confuse them. Here is what each one is, what it costs in effort, and when a small firm should do it.
Read articleWhat RMM is, and why your IT provider depends on it
Remote monitoring and management is behind almost everything a managed IT provider does. What it does on your computers and what to ask about it.
Read articleDoes Microsoft 365 back up your data?
Most firms assume their email and files are backed up because they live in the cloud. They are kept available, which is a different thing.
Read articleMulti-factor authentication: the first thing to fix
If you do one thing for your security this month, turn on multi-factor authentication for email. What it is, why it matters and how to roll it out.
Read articleThe 15-point security checklist for professional firms
A free checklist any law, accounting or advisory firm can work through in an afternoon to find where its client data is exposed.
Read articleThe same-day offboarding checklist
When someone leaves your firm, their access should end that day. This is every place it tends to linger, in the order to deal with it.
Read articleWhy software updates matter more than they used to
Attackers increasingly get in through software that hasn't been updated. Here is why that's happening and what a small firm should do about it.
Read articleYour firm's passwords are on the dark web. Now what?
What it means when staff credentials turn up in stolen data, how they got there, and the three steps to take when you find out.
Read articleA cybersecurity checklist for small law firms
Twelve practical controls a small law firm should have in place to protect client information, and how to tell whether yours are working.
Read article
Find out where your business is exposed. Free.
Thirty minutes, no access to your systems, and you keep your Fix-First List whether or not you hire us.
We take on a limited number of new clients each month, so every setup gets the attention it needs.