The SMB Security Checklist

30 practical controls that stop the attacks small and mid-sized businesses actually face. Built by our security team — plain English, prioritised, and genuinely useful.

• Accounts & access (MFA, passkeys, least privilege)
• Email & phishing (SPF/DKIM/DMARC, payment verification)
• Devices & updates (encryption, patching, endpoint protection)
• Network & IoT (segmentation, default passwords, inventory)
• Data & backups (3-2-1 rule, encryption, GDPR records)
• People & incident response (a plan you can actually use)