Business Technology Resource Center

Small Business Cybersecurity Checklist

Cybersecurity is an ongoing business responsibility. Begin by identifying important systems and data, then reduce risk with strong access controls, updates, training, backups and an incident plan.

01

Protect accounts and devices

Use unique passwords, multifactor authentication, supported software, automatic updates and limited administrator access.

  • Require multifactor authentication
  • Update software promptly
  • Remove unused accounts
02

Protect data and vendors

Know which sensitive information the business holds, why it is needed, where it lives and which vendors can access it.

  • Keep only needed data
  • Encrypt appropriate information
  • Review vendor security
03

Prepare for incidents

Maintain tested backups and a written response plan covering responsibilities, containment, recovery, communication and legal obligations.

  • Test data restoration
  • Document key contacts
  • Practice the response plan

Frequently Asked Questions

Questions About Small Business Cybersecurity Checklist

Are small businesses targeted by cybercriminals?

Yes. Organizations of every size face phishing, account theft, ransomware, fraud and data loss risks.

What should a business do first?

Identify critical accounts and data, enable multifactor authentication, update systems, train staff and create recoverable backups.

Keep Building

Use the complete Chamber resource network.

Continue with AI, marketing, funding, networking and member expertise.