Ransomware, phishing, compromised accounts: cyberattacks target organisations of every size. No measure guarantees absolute security, but a few well-applied practices greatly reduce the risk.
Back up, and test restores
Regular backups, with at least one copy offline or isolated from the network, make it possible to recover after an incident. A backup is only worth something if restoring it has been tested.
Keep systems up to date
Operating systems, software, network equipment, cameras: updates fix known vulnerabilities. An equipment inventory helps make sure nothing is forgotten.
Strengthen authentication
Unique, strong passwords, a password manager and multi-factor authentication on email and remote access block a large share of intrusion attempts.
Limit access rights
Each user only has the access they need for their work. Administrator accounts are reserved for administration, and accounts of people who have left the organisation are disabled.
Segment and protect the network
Separating workstations, servers, video surveillance and guest Wi-Fi limits the spread of an attack. A properly configured firewall controls incoming and outgoing traffic.
Raise team awareness
Most attacks start with a fraudulent email or message. Simple guidelines and regular reminders reduce the risk.
Prepare for an incident
Knowing whom to alert, which systems to isolate and how to restore data makes it possible to react quickly. A security audit helps set these priorities and build a realistic action plan.