🛡️ SMB Cybersecurity Checklist

Quickly assess your organization's cybersecurity strengths and gaps across key domains.

Use strong, unique passwords for every system and account

Require multi-factor authentication (MFA) for all sensitive systems (email, VPN, admin tools)

Enable automatic updates for operating systems and apps

Use a centralized system to track and apply patches

Train employees quarterly on cybersecurity best practices and phishing detection

Apply the principle of least privilege to restrict admin access

Remove access for former employees within 24 hours of exit

Require a trusted password manager for team use

Secure all Wi-Fi networks using WPA3 encryption and strong passphrases

Require VPN access for employees working remotely

Enable and enforce firewalls on employee laptops, servers, and IoT devices

Monitor network activity using an intrusion detection system (IDS)

Encrypt sensitive data at rest and in transit

Maintain regular backups in offline or secured cloud storage

Conduct quarterly tests to ensure backups can be restored

Use data loss prevention (DLP) tools to prevent leaks of sensitive data

Create and maintain a written incident response plan

Assign clear roles and responsibilities for breach response

Keep legal and cyber insurance contacts easily accessible

Simulate cybersecurity incidents through annual tabletop exercises

Identify which compliance frameworks apply to your business

Assess third-party vendor access and cybersecurity risk

Verify that vendors follow secure data handling and storage practices

Schedule internal or third-party cybersecurity audits at least annually

Collect and monitor logs from critical systems in a central location

Progress: 0

Enter your email to view your cybersecurity score and receive a copy of the checklist.

Cybersecurity clarity for small and mid-sized teams.
Trusted content, simple tools, and practical advice.

Get occasional insights & tools to protect your business.

Email address

🔐 Foundational Cyber Hygiene