Small Business Cybersecurity Checklist 2026
A practical 2026 checklist for micro and small businesses — access, updates, invoices, backups, people, and a 90-day starter plan.
the quiet compromise
Security e-Drift
Calm field notes on cybersecurity, digital risk and the small changes in behaviour that can create larger security problems.
Security e-Drift is James Lugton’s knowledge platform — practical technology, security and digital-life writing without the hype. This page gathers the cybersecurity strand.
It is related to Safe Online Hub as the place for practical field notes.
A practical 2026 checklist for micro and small businesses — access, updates, invoices, backups, people, and a 90-day starter plan.
A short device, inbox, and account routine you can keep — plus a self-check on whether your bank passcode is strong enough.
Stop. Pause. Three questions before you click — a plain habit for spotting scams across email, phone, WhatsApp, and more.
Cameras, speakers, and apps keep working in the background long after setup day. A calm look at accounts, updates, and what “always listening” really means at home.
A sticker over a real QR code can send you to a lookalike site. Quishing is quiet, physical, and easy to miss when you’re in a hurry to pay or park.
A flood of login prompts isn’t a glitch — it’s often someone already holding your password and hoping you’ll tap Approve just to make it stop.
AI makes the props sharper, but the play is still human: urgency, authority, and a request you’re not quite ready to refuse. Here’s how to spot the pattern.
Deepfakes aren’t magic — they’re scale. A calm guide to what AI-made media can do, what still gives them away, and how to slow down before you trust a face or voice.