Five quick security wins for small offices

Most small-business breaches don't involve sophisticated hacking — they start with a reused or phished password. Here are five changes that close the biggest gaps.

1. Turn on multi-factor authentication everywhere

Email, accounting, banking, domain registrar and hosting. Prefer an authenticator app over SMS.

2. Set up SPF, DKIM and DMARC

These DNS records stop criminals from sending email that looks like it came from your domain.

3. Test your backups

A backup you've never restored is a hope, not a plan. Restore one file this week.

4. Remove old accounts

Former staff and contractors should lose access on their last day. Review Microsoft 365 users quarterly.

5. Patch automatically

Enable automatic updates for Windows, macOS, browsers and your firewall.

Need a hand? A free assessment will show you where you stand.