Small business cyber security handbook
Explore the practical steps small business can take to protect their systems, data, staff and customers from cyber threats.
- Published
-
- Last reviewed
-
At a glance
Protect your small business from cyber threats by taking practical steps to secure your accounts, devices, networks and data. Learn how to prevent common attacks such as phishing, ransomware and business email compromise, and strengthen your ability to respond to cyber incidents. Businesses should build cyber security awareness among staff, safeguard customer information and adopt secure technologies. This handbook is for small business owners, managers and employees seeking clear, actionable cyber security guidance.
Key actions
Turn on multi-factor authentication and use strong, unique passwords or passkeys for your business accounts.
Keep your devices, software and apps up to date by installing security updates as soon as they become available.
Back up important business and customer information regularly, and test that you can restore it if needed.
Train staff to spot scams and phishing emails, and always verify payment requests through a trusted channel.
Introduction: why cyber security matters for your business
For a small business, even a minor cyber security incident can have devastating impacts.
This handbook includes basic security measures to help protect your business against common cyber threats. As a starting point, we recommend the following three measures:
- Turn on multi-factor authentication
- Keep your software up to date
- Regularly back up your data
This handbook might include measures that are not relevant to your business, or your business may have more complex needs.
We understand that small businesses have varying degrees of technical skills and resources impacting their ability to implement advice. If you have questions about this advice or cyber security more broadly, we recommend you speak to an IT professional or a trusted advisor.