Your email, payment account, domain, booking tool, and file storage are the keys to the shop. Protect those first. A giant security shopping list can wait.

• Shared passwords or one password used everywhere.
• Old staff accounts that still work.
• Updates postponed on the register, router, or office computer.
• A backup nobody has tested.

• List the five accounts that could stop business today.
• Turn on multifactor authentication, starting with email and banking.
• Remove old users and update the devices that take money.
• Back up one important folder, then prove you can restore a file.

Call us when the list is messy, a device keeps failing, or nobody knows who owns the accounts. If there may be an active breach, stop changing things and contact a qualified incident-response professional.

Get a plain-English second opinion

Product features and rules can change. Use the linked source as the current word.

• NIST Small Business Cybersecurity Corner — Government guidance selected for small-business use.
• CISA small and midsize business resources — Official steps for phishing, passwords, an extra sign-in check, updates, backups, and encryption.