Start here: a 5-step security checklist
Five simple steps to protect your business, based on advice from the Australian Cyber Security Centre.
⏱ In about 5 minutes
Affiliate disclosure: links on this page may earn us a commission at no extra cost to you.
Cyber criminals target small businesses too. You don't need to be technical. These five steps follow advice from the Australian Cyber Security Centre (ACSC), part of the Australian Government. Most are free.
1. Turn on multi-factor authentication (MFA)
MFA means you need something extra, such as a code from an authenticator app, as well as your password. The ACSC says to turn it on wherever you can, starting with important accounts like email, banking, document storage and social media. It is usually under the account's security settings, and may be called two-factor authentication or two-step verification. ACSC Small Business Hub.
2. Use a password manager
A password manager creates and stores a unique password for each account, so you don't have to remember them. The ACSC says to protect it with MFA and a long, unique passphrase (four or more random words), and not to reuse passwords. See our password manager guide. ACSC: securing accounts and identities.
3. Back up your information
A backup is a copy of your files that lets you recover if they are damaged, lost or stolen. The ACSC recommends a plan to back up regularly or turning on automatic backups. ACSC: small business cyber security handbook.
4. Keep software updated
Updates fix security flaws. The ACSC says to update all devices, apps and software, turn on automatic updates if you can, and consider replacing products too old to be updated. ACSC: small business cyber security handbook.
5. Spot scam messages
Scams arrive by email, text, phone and social media. The ACSC says they try to get you to send money or gift cards, click harmful links or attachments, or hand over information such as passwords. Pause before you click or pay, and make sure your staff know what to look for. ACSC Small Business Hub.
Want to go further? Read the full ACSC Small Business Hub. This page is general information, not professional advice. For help with your own setup, ask an IT professional.
Frequently asked questions
Do I need to be technical to do this?
No. Each step is a setting or a free app. The ACSC guide explains each one in plain language.
What should I do first?
Turn on MFA for your email, banking and other important accounts. The ACSC suggests starting with those.
Do I have to buy anything?
Not necessarily. MFA, updates and many backup options can be free. A password manager may cost money, so check the vendor's plans.
Is this advice only for Australian businesses?
The guidance comes from the Australian Government, but the basics apply to most small businesses.
Get one short tip a week
One quick, practical tip on saving time or staying safe with business software. Takes about two minutes to read. Unsubscribe any time.