GUIDE · Small Businesses · 3 pages
Small Business Security Action Plan
This is not an audit. It is a one-month sequence for a team without a security department.
This week
- Turn on multi-factor for email and for the bank.
- List every person who can move money or read customer files.
- Remove any shared password from group chat and put it in a vault, or change it.
This month
- Give each person their own login. Daily work should not need admin rights.
- Turn on automatic updates for laptops and phones.
- Confirm a backup exists somewhere ransomware cannot encrypt, and restore one file.
- Write the name of the person who receives “I clicked something” reports.
Every quarter
- Remove accounts for people who have left.
- Look at vendors that store customer data and turn on their security options.
- Re-read the payment-change rule out loud in a meeting: we call a known number.
HavenShield · Free to print and share with your family or team.