← Back to SGS UniversitySmall Business CourseSmall Business Cyber Checklist
A practical checklist for owners, managers, schools, churches, nonprofits, and service teams that need simple cybersecurity controls.
Course Overview
Small organizations often run lean. That does not mean cybersecurity should be ignored. A simple checklist can help protect the website, email accounts, staff access, backups, and incident response process.
AdvertisementAuto Ads may appear here after site approval.
What You Will Learn
- How to protect your website and domain.
- How to reduce email and account risk.
- How to manage staff access responsibly.
- How to prepare for basic incident response.
- How to review your security monthly.
Lesson 1: Website Protection
Use HTTPS, keep the website updated, check security headers, remove unused plugins, protect admin pages, and scan your website after changes.
Lesson 2: Email Protection
Email should use MFA, strong passwords, spam filtering, and basic domain authentication records where possible. Staff should know how to report suspicious messages.
Lesson 3: Staff Access
Give users only the access they need. Remove accounts when people leave. Avoid shared accounts for critical systems. Keep an access list for important platforms.
Lesson 4: Backups and Recovery
Backups should include website files, databases, important documents, and configuration details. Test restore procedures before an emergency.
Lesson 5: Incident Readiness
Know who to call, what to shut down, how to change passwords, where backups are stored, and how to communicate with customers or members if something goes wrong.
Monthly Checklist
- Run a website scan.
- Review admin accounts.
- Check updates and backups.
- Review suspicious emails or login alerts.
- Confirm contact details for hosting, domain, and website support.
Quick Quiz
1. Why should old staff accounts be removed?
2. Why should backups be tested?
3. Name one monthly cybersecurity task.