The document outlines 10 essential cybersecurity recommendations for small businesses, including training employees on security practices, protecting data and devices, and implementing mobile device safeguards. It emphasizes the importance of backing up data regularly, controlling access to devices, securing Wi-Fi networks, and handling payment cards with care. Additionally, it advises limiting data access for employees and maintaining secure and unique passwords with regular updates.

1. 10 Quick Cybersecurity
Wins for Small Business
Presented by Symbiont, Inc.
https://www.symbiont.com/cmmc

2. Train Your Employees
• Establish basic security practices and policies for employees
• Cover topics such as strong passwords, internet usage guidelines
• Establish rules for when it comes to handling and protecting customer
information and other vital data

3. Protect Your Data, Devices, and Network
• Maintain Clean Machines
• Having the latest security software, web browser, and operating system are the best
defenses against viruses, malware, and other online threats.
• Set Antivirus Software to Run Scan After Updates
• Install Key Software Updates as They Become Available

4. Have A Firewall on Your Internet Connection
• Make sure the operating system's firewall is enabled
• If employees work from home ensure their home systems are also
protected by a firewall.

5. Implement a Mobile Device Action Plan
• Require users to password-protect their devices
• Have data on mobile devices encrypted
• Install security apps to keep data from being stolen
• Establish reporting procedures for lost or stolen devices

6. Have Backup Copies of Business Data and
Information
• Regularly backup the data on all computers
• word processing documents,
• electronic spreadsheets,
• databases,
• financial files,
• human resources files,
• accounts receivable/payable files
• Backup data automatically
• Preferably on a weekly basis
• Store copies either in the cloud or offsite.

7. Control Access to Your Devices,
• Every employee has unique user accounts
• Laptops locked when unattended
• Administrative privileges should only be given to trusted IT staff and key
personnel

8. Secure Your Wi-Fi Networks
• Ensure the network is secure, encrypted, and hidden
• Hide your network so it does not broadcast the network name (SSID)
• Password protect access to the router

9. Handle Payment Cards with Care
• Ensure the most trusted and validated tools and anti-fraud services are
used
• Understand your security obligations pursuant to agreements
• Isolate payment systems from other less secure programs
• Don’t use the computer you surf the internet to process payments

10. Limit Your Employees Access to Data
• One employee should not have access to all data systems
• Grant access to employees only to the specific data they need to complete
their job
• Employees should not have the ability to install software without
permission

11. Keep Passwords Fresh
• Require employees to use unique passwords
• Require Passwords to be changed at every three months (or sooner)
• Consider implementing multi-factor authentication
• Inquire with vendors if they offer multi-factor authentication for your
account