Cybersecurity Checklist for Small & Medium Businesses (SMEs)
A Simple, Practical Guide to Protect Your Business

Cybersecurity can feel overwhelming—but it doesn’t have to be.

The reality is this: most cyberattacks succeed because of basic gaps, not sophisticated hacking.

This checklist gives you a simple, actionable starting point to protect your business today.

1. Lock Down Your Logins

✔ Use Multi-Factor Authentication (MFA) on all accounts
✔ Avoid reusing passwords across systems
✔ Use a password manager (don’t store passwords in browsers or spreadsheets)

Why it matters:
Over 99% of attacks target login credentials.

2. Train Your People (Your Biggest Risk & Defence)

✔ Teach staff how to spot phishing emails
✔ Run simple awareness sessions (15–30 mins quarterly)
✔ Encourage a “pause before clicking” mindset

Red flags to watch for:

Urgent payment requests
Unexpected attachments
“Reset your password” emails
3. Secure Your Cloud Systems

✔ Review who has access to what
✔ Remove old or inactive user accounts
✔ Limit admin access to only 1–2 trusted people

Common mistake:
Everyone has access to everything.

4. Back Up Your Data Properly

✔ Use automatic backups
✔ Store backups offline or in a separate system
✔ Test recovery at least twice a year

Rule:

If you haven’t tested it, don’t trust it.

5. Keep Systems Updated

✔ Turn on automatic updates
✔ Patch operating systems and software
✔ Update routers, firewalls, and devices

Most attacks exploit known vulnerabilities.

6. Monitor for Unusual Activity

✔ Watch for login alerts from unusual locations
✔ Review email forwarding rules
✔ Check for unknown devices accessing systems

7. Have a Simple Response Plan

✔ Who do you call if something goes wrong?
✔ How do you isolate affected systems?
✔ Where are your backups?

Even a 1-page plan is better than none.

Final Thought

Cybersecurity isn’t about perfection—it’s about reducing risk.

If you implement just:

MFA
Backups
Staff awareness

You’ve already reduced your risk significantly.

Need Help Getting Started?

At IQ People, we’re working with SMEs to:

Build practical cyber awareness
Improve everyday security habits
Protect business operations and data

Reach out if you’d like a simple, no-nonsense starting point.