Cybersecurity for Small Businesses

By the end of this course, you should be able to:

Explain cybersecurity in practical business language.

Understand common cyber risks facing small businesses.

Identify important business accounts, devices, systems and data.

Create a simple cybersecurity asset inventory.

Identify the business impact if important systems fail.

Prioritize cybersecurity risks rather than treating everything equally.

Assign basic cybersecurity responsibilities.

Develop simple cybersecurity rules and policies.

Improve password practices.

Implement multi-factor authentication where supported.

Manage employee access more safely.

Reduce unnecessary administrator privileges.

Protect business email accounts.

Recognize common phishing and impersonation attempts.

Improve smartphone and laptop security.

Build safer software-update habits.

Understand basic network and Wi-Fi security.

Improve cloud-storage and file-sharing practices.

Build a practical backup system.

Test whether important information can actually be restored.

Reduce risks created by employees and contractors.

Improve cybersecurity awareness training.

Evaluate important suppliers and technology providers.

Recognize common warning signs of an incident.

Create a simple incident-reporting process.

Build a Cyber Incident Response Plan.

Prepare for business recovery after a cyber incident.

Create employee onboarding and offboarding security checklists.

Build an account and access register.

Create a Cybersecurity Risk Register.

Build a 30-day cybersecurity implementation plan.

Conduct a basic cybersecurity self-assessment.

Measure cybersecurity improvements.

Know when professional cybersecurity assistance is required.

Build a repeatable cybersecurity management system for a small business.