Most small-business incidents are a reused password, an old staff account that still works, a register that never updates, or one convincing email. None of them need a security product to fix; they need someone to do the boring jobs and write down that they are done.

1. Turn on two-step codes for email and banking first, then the register and booking tool. 2. Remove every account for someone who no longer works there. 3. Update the devices that take money and the router. 4. Back up the folder you cannot lose, then restore one file to prove it works.

If you handle health, legal, or card data, there are rules on top of this; a required safety rules requirement is a separate conversation with someone licensed for it. Do not buy a package because a salesperson used the word breach.

We do these four jobs on site in New York and write down what changed. If your setup is bigger than that, the free Tech Audit names what to fix first.

Modern devices ship with it. Turn on updates and two-step logins before spending on anything else.

Change the passwords from a clean device, turn on two-step codes, tell your bank if money moved, and call. Do not pay anyone who contacts you first.

Want it handled? IT Support — Something is broken? Tell us what stopped and what has to keep working.