There is no need for a large budget to protect yourself from the most common attacks. This list contains the basic things that every SME should have solved. If you answer no to several points, you already know where to start.
Accounts and Passwords
- Email and remote access have double authentication factor activated.
- Each person has its own user: there are no shared accounts.
- A password manager is used and no one repeats passwords between services.
- When someone leaves the company, their accesses are closed the same day.
teams and programs
- All equipment is automatically updated.
- There is an antivirus or EDR On every computer and no one can disable it.
- The laptop has the encrypted disk.
- Users do not work with administrator permits.
Copies of security
- There are daily copies of the important.
- At least one copy is out of the office network and cannot be deleted from it.
- It has been tried to restore a copy in the last three months.
Post and Web
- The domain is configured. SPF, DKIM and DMARC To prevent them from sending your mail.
- The website and its add-ons are updated and have their own copy.
Persons and Processes
- The team has received basic training on fraudulent emails in the last year.
- Any change in a provider’s bank account is confirmed by telephone.
And now what?
If you have doubts with several points, the free analysis of Ovnar review from outside your email, your website and if your domain appears in filters, and explains you on 30 minutes to fix first.