Insights
SME cybersecurity: five priorities to strengthen your protection
Protecting a business rests on several complementary measures. Access management, updates, backups and internal procedures are the priority subjects to examine, according to your environment.
Published on Updated on Reading 2 minutes
1.Strengthen authentication
Turn on multi-factor authentication for the services that offer it, starting with email and sensitive access. The methods chosen and the recovery procedures must match the risks.
2.Keep control of accounts and permissions
Identify the users, limit privileges to what each role needs, and organise the closing of access when people leave. Technical accounts also need an owner and rules for managing them.
3.Keep up with updates
An inventory makes it possible to identify the equipment concerned, the versions in use and the exceptions to handle. Planning must take account of criticality and operating constraints.
4.Check that restores are possible
Define the data covered, protect the copies and test the restore. The result of the test must be documented, including the scope restored and the time it took.
5.Organise reporting and verification
People must know who to tell about a suspicious message or behaviour. A change of bank details must be verified through a known channel, independent of the message received.
Building a plan that fits
These measures do not amount to complete protection. A review makes it possible to set priorities, responsibilities and the checks that are useful for your business. The plan must also cover what to do once an incident is detected.
Review your security priorities
The free audit is a way to look at your situation and identify the three subjects to handle first.