This document provides 12 cybersecurity rules for small businesses. It begins by stating that small businesses have a great need for cybersecurity but limited resources to dedicate to protection. The rules are designed to provide affordable guidelines. The first rule is to focus on the business needs rather than making security the primary focus. Other rules include deciding the appropriate level of security needed, emphasizing prevention over reaction, using existing security software, regularly backing up important data, and creating a written security policy. The document stresses that basic security measures can be effective and affordable for small businesses.