Small Business Cybersecurity Checklist 2026
A practical 2026 checklist for micro and small businesses — access, updates, invoices, backups, people, and a 90-day starter plan.
Explore a topic
Cybersecurity
Threats, identity, authentication, attacks and defence — practical protection for homes and small teams.
Articles and guides
-
-
A 10-Minute Cyber Check
A short device, inbox, and account routine you can keep — plus a self-check on whether your bank passcode is strong enough.
-
How Scams Reach You (and How to Spot Them Before They Catch You)
Stop. Pause. Three questions before you click — a plain habit for spotting scams across email, phone, WhatsApp, and more.
-
Smart Home, Quiet Risks
Cameras, speakers, and apps keep working in the background long after setup day. A calm look at accounts, updates, and what “always listening” really means at home.
-
The QR Code That Isn’t What It Seems
A sticker over a real QR code can send you to a lookalike site. Quishing is quiet, physical, and easy to miss when you’re in a hurry to pay or park.
-
MFA Bombing: When the Codes Won’t Stop
A flood of login prompts isn’t a glitch — it’s often someone already holding your password and hoping you’ll tap Approve just to make it stop.
-
Social Engineering Still Runs the Show
AI makes the props sharper, but the play is still human: urgency, authority, and a request you’re not quite ready to refuse. Here’s how to spot the pattern.
-
Deepfakes and the Power of AI
Deepfakes aren’t magic — they’re scale. A calm guide to what AI-made media can do, what still gives them away, and how to slow down before you trust a face or voice.
-
What If the Shop Assistant Is a Bot?
Chatbots help small shops move faster — and fake “support” chats can wear the same friendly face. Keep money off the chat rails.
-
Plug-Ins, GPTs, and Browser Agents You Didn’t Vet
Clever helpers often want broad access to tabs and files. Vet permissions like you would a locksmith — least access wins.
-
AI That Reads Your Inbox for You
Inbox assistants triage your day — and can be nudged by poisoned emails. Treat summaries as sketches; open money and access issues yourself.
-
The Voice on the Phone Might Not Be Them
AI can fake a familiar voice under pressure. A calm family ritual — hang up, call back, use a code word — still beats panic.