What? A process to regulate who can access what within your business’ computing environment Access control allows business owners to: decide who they would like to give access privileges to. determine which roles require what access. enforce staff access control limits. Why? To minimise risk of unauthorised access to important information Many small businesses employ internal staff or outsource work to external suppliers e.g. website hosting companies. Access control systems help you protect your business by allowing you to limit staff and supplier access to your computer: networks. files. applications. sensitive data. Who? Principle of least privilege Depending on the nature of your business, the principle of least privilege is the safest approach for most small businesses. It gives users the bare minimum permissions they need to perform their work. This also reduces the risk of an ‘insider’ accidentally or maliciously endangering your business. Protecting against malware Restrict administrator privileges. Do not share passphrases. Remember to revoke accounts.