Strong, Unique Passwords

Use a password manager to generate and store long, random passwords for every account. Never reuse passwords.

Multi-Factor Authentication (MFA)

Turn on MFA everywhere you can — email, bank portals, cloud services — to block attackers even if a password is stolen.

Keep Software & Devices Updated

Enable automatic updates for your OS, browsers, and key applications. Patches close security holes fast.

3-2-1 Data Backups

Follow the 3-2-1 rule:

• 3 copies of your data
• 2 different media types (local drive + USB)
• 1 copy offsite/offline

Antivirus & Anti-Malware

Install a reputable security suite on every workstation and server. Schedule daily scans and real-time protection.

Firewall & Network Security

Enable hardware or software firewalls to block unauthorized access. Segment guest Wi-Fi from your corporate network.

Employee Training

Run quarterly phishing drills. Teach staff to spot suspicious emails, links, and attachments before they click.

Secure Remote Access

Require VPN or zero-trust tools for offsite logins. Disable remote desktop unless absolutely necessary.

Least Privilege Principle

Give each user the minimum access they need. Remove admin rights from daily-use accounts.

Encryption

Encrypt sensitive files at rest (disk encryption) and in transit (HTTPS, SFTP) to keep data unreadable if intercepted.

Incident Response Plan

Document who to call, how to isolate systems, and where your offline backups live. Test the plan at least once a year.

Vendor & Partner Security

Require proof of security practices from any third party handling your data. Include cybersecurity clauses in contracts.

Vulnerability Scanning & Audits

Run monthly scans of your network and public-facing systems. Patch or remove any outdated services.

Log Monitoring & Alerts

Centralize system and access logs. Set up alerts for unusual login locations, repeated failures, or large file transfers.

Policy Documentation & Review

Write simple security policies (password rules, device usage, data classification). Review and update them every 6 months.