Article
Cybersecurity Awareness Month: four things every small business should do this October
Four practical steps, no budget required, that meaningfully reduce your risk this month and every month after.
- PROTECT
- EMPOWER
6 min ·
RESOURCES / ARTICLES
Practical writing for people who run businesses.
Short, plain-language articles on automation, security and training. Each one ends with things you can do today.
LATEST
ALL ARTICLES
99 results
ArticleShould your team use ChatGPT at work? A simple AI policy for small businesses
A plain-language starting point for deciding what your team can and can't do with AI tools, and how to write it down.
- EMPOWER
- PROTECT
- AUTOMATE
6 min ·
ArticleBackups aren't the same as recovery
Having backup files isn't the same as being able to recover from a disaster. Here's the difference, and how to close the gap.
- PROTECT
6 min ·
ArticleCMMC in plain English for small defense contractors
CMMC can sound like alphabet soup. Here is what Level 1 and Level 2 actually require, and where a small contractor should start.
- PROTECT
6 min ·
ArticleWhat your cyber insurance company will ask you, and how to get ready
Cyber insurance applications ask detailed questions about your controls. Here is what to expect and how to answer accurately.
- PROTECT
6 min ·
ArticleHow to get started in cybersecurity
Breaking into cybersecurity doesn't require a four-year degree. Here are realistic entry paths, starter certifications, and how to build skills that show up on a resume.
- EMPOWER
6 min ·
ArticleHIPAA security risk assessments, in plain English
The HIPAA Security Rule requires a risk assessment. Here is what it covers, how often to do it, and where small practices usually fall short.
- PROTECT
6 min ·
ArticleHow to spot a fake invoice before you pay it
Fake invoices cost businesses real money every week. Here are the warning signs to check before you approve a payment.
- PROTECT
- EMPOWER
6 min ·
ArticleMulti-factor authentication, explained in plain English
A plain-language look at multi-factor authentication: what it is, which types are strongest, and where to turn it on first.
- PROTECT
6 min ·
ArticleWhy missed calls cost more than you think
When a customer can't reach you, they usually call the next business instead. Here's how missed-call text-back can close that gap.
- AUTOMATE
6 min ·
ArticleThe first hour of a ransomware attack: what to do and what not to do
The decisions made in the first hour of a ransomware attack affect how fast, and how well, you recover.
- PROTECT
6 min ·
ArticleIs your business ready to automate? Six questions to ask first
Automation works best when you know what you're fixing. These six questions help you find the right place to start.
- AUTOMATE
6 min ·
ArticleAccounts receivable automation: reminders, follow-ups and fewer late payments
Stop wasting time chasing late payments. Accounts receivable automation handles the reminders and follow-ups so you can focus on running your business.
- AUTOMATE
10 min ·
Article12 AI automation examples for everyday business work
AI automation examples range from simple email drafting to complex schedule management. See how small businesses use these tools to stay productive without adding staff.
- AUTOMATE
6 min ·
ArticleAdding an AI chatbot to your website: a buyer's checklist
An AI chatbot for website use can turn visitors into leads while you sleep. Use this checklist to choose a bot that helps your customers instead of annoying them.
- AUTOMATE
- EMPOWER
6 min ·
ArticleAI for small business: where it pays off first
AI for small business works best when it tackles repetitive tasks that drain your team's time. Focus on areas like lead response, scheduling, and data entry to see the fastest return.
- AUTOMATE
- EMPOWER
6 min ·
ArticleAI receptionists: what they handle well and where they fall short
An AI receptionist can answer calls 24/7, book appointments, and filter spam. Learn if this technology is ready to handle your customer calls or if it will frustrate your clients.
- AUTOMATE
- EMPOWER
6 min ·
ArticleHow to automate invoicing and get paid faster
Manual billing slows down your cash flow and creates extra work for your team. Learn how to automate invoicing to reduce errors and get money in your bank account sooner.
- AUTOMATE
9 min ·
ArticleThe 3-2-1 backup rule, updated for ransomware
Why the classic 3-2-1 backup rule needs a modern update to protect small businesses against sophisticated ransomware attacks.
- PROTECT
7 min ·
ArticleBusiness continuity plan basics: keep working when systems go down
Learn how a business continuity plan helps your small business stay operational during a crisis, focusing on people, processes, and communication.
- PROTECT
- EMPOWER
6 min ·
ArticleBusiness email compromise: how it works and how to stop it
Business email compromise (BEC) is a sophisticated scam that targets businesses to steal funds through unauthorized wire transfers and fraudulent requests.
- PROTECT
7 min ·
ArticleBusiness Wi-Fi security: guest networks, passwords and the basics
A practical guide to securing your office Wi-Fi, emphasizing the need for isolated guest networks and strong access controls.
- PROTECT
6 min ·
ArticleHow to write a BYOD policy your team will follow
A guide to creating a Bring Your Own Device (BYOD) policy that protects company data while respecting employee privacy.
- PROTECT
- EMPOWER
6 min ·
ArticleDoes the CCPA apply to your business? A plain-language check
The California Consumer Privacy Act gives residents more control over their personal data. Find out if your small business needs to comply.
- PROTECT
6 min ·
ArticleThe CDK outage: when the software every dealer runs went dark
A retrospective look at the 2024 CDK Global ransomware attack and what it teaches small and mid-sized businesses about vendor concentration and manual workarounds.
- PROTECT
- AUTOMATE
6 min ·
ArticleThe Change Healthcare outage: what one missing login step cost
The 2024 Change Healthcare attack showed how a single missing security step can disrupt an entire industry for weeks.
- PROTECT
6 min ·
ArticleUsing ChatGPT for business safely: a practical guide
Using ChatGPT for business can increase productivity, but it requires clear rules to protect your data. Learn how to set up accounts and policies that keep your information private.
- EMPOWER
- PROTECT
6 min ·
ArticleA cloud migration checklist for small businesses
Moving to the cloud can save money and improve flexibility, but only if done carefully. Use this cloud migration checklist to ensure a smooth transition for your team.
- AUTOMATE
- EMPOWER
7 min ·
ArticleCMMC Level 1: the basic safeguards defense suppliers need
If you want to work with the Department of Defense, you must meet CMMC standards. Level 1 covers the basics of protecting Federal Contract Information.
- PROTECT
6 min ·
ArticleThe Colonial Pipeline attack, five years later
A look back at the 2021 Colonial Pipeline ransomware attack and what it still teaches businesses about MFA, network segmentation, and recovery planning.
- PROTECT
6 min ·
ArticleIs CompTIA Security+ worth it? What it covers and who it helps
The CompTIA Security+ is one of the most popular entry-level security certificates. Find out if it is the right choice for your career and what you need to know to pass.
- EMPOWER
7 min ·
ArticleChoosing a CRM for small business: what matters more than features
A CRM for small business should help you win more jobs, not create more work. Learn why simplicity and adoption matter more than a long list of technical features.
- AUTOMATE
- EMPOWER
9 min ·
ArticleThe CrowdStrike outage was not an attack. Plan for it anyway.
A look at the July 2024 global IT outage, why a single software update crashed 8.5 million machines, and how businesses can survive vendor failures.
- PROTECT
- AUTOMATE
6 min ·
ArticleCustomer retention strategies that run on autopilot
Keep customers coming back without doing the work by hand. These customer retention strategies use automation to maintain relationships and stop revenue leaks.
- AUTOMATE
6 min ·
ArticleCyber insurance requirements: the controls insurers now ask about
Getting cyber insurance is no longer just about filling out a form. Insurers now require specific security controls before they will offer coverage.
- PROTECT
6 min ·
ArticleCybersecurity for accountants and tax preparers
Protecting tax returns and financial data is both a legal requirement and a business necessity. This guide covers the basics of cybersecurity for accountants to meet FTC Safeguards and protect client data.
- PROTECT
6 min ·
ArticleCybersecurity for churches and faith organizations
Churches handle sensitive pastoral information and member donations, making them vulnerable to scams and data theft. Learn the essentials of cybersecurity for churches to protect your community.
- PROTECT
6 min ·
ArticleCybersecurity for dental offices: a practical starting point
Protecting patient health information and maintaining office operations requires a clear plan. Learn the practical steps for cybersecurity for dental offices to ensure HIPAA compliance and data safety.
- PROTECT
6 min ·
ArticleCybersecurity for law firms: protecting client matters and trust accounts
Law firms handle sensitive data and large sums of money, making them prime targets. Learn the practical steps to implement cybersecurity for law firms that protects client confidentiality and trust accounts.
- PROTECT
6 min ·
ArticleCybersecurity for manufacturing: keeping the floor running
Manufacturing faces unique threats that can halt production lines and compromise trade secrets. Learn how to implement cybersecurity for manufacturing to protect your operations and supply chain.
- PROTECT
- AUTOMATE
6 min ·
ArticleCybersecurity for nonprofits: protecting donors on a tight budget
Nonprofits handle valuable donor data and mission-critical funds while often facing resource constraints. Learn how to implement cybersecurity for nonprofits that is effective and affordable.
- PROTECT
- EMPOWER
6 min ·
ArticleCybersecurity for schools: protecting students, staff and records
Schools handle vast amounts of sensitive student and staff data on limited budgets. Learn how to implement cybersecurity for schools that protects privacy and ensures a safe learning environment.
- PROTECT
- EMPOWER
6 min ·
ArticleEntry-level cybersecurity jobs: roles, skills and where to start
Starting a career in security can be overwhelming. This guide to cybersecurity jobs entry level covers the best roles to look for and the skills you need to land them.
- EMPOWER
7 min ·
ArticleDark web monitoring: what it can and can't tell you
Understand how dark web monitoring helps small businesses spot stolen credentials before they are used in an attack, and the limitations of these tools.
- PROTECT
6 min ·
ArticleData breach response plan: who does what in the first 72 hours
A structured data breach response plan helps small businesses contain the damage and meet legal requirements in the critical first hours of a security incident.
- PROTECT
6 min ·
ArticleDeepfake scams: voice and video fraud aimed at businesses
Deepfake scams use artificial intelligence to clone voices and faces, creating highly convincing fraudulent requests that target corporate funds and sensitive data.
- PROTECT
- EMPOWER
7 min ·
ArticleHow to write a disaster recovery plan (with a simple template outline)
A practical disaster recovery plan template and guide designed to help small businesses recover quickly from IT failures, cyberattacks, or natural disasters.
- PROTECT
- EMPOWER
7 min ·
ArticleEmployee offboarding security: the access you forget to remove
When an employee leaves, their digital access must leave with them. This guide to employee offboarding security covers the often-forgotten steps to protect your data.
- PROTECT
7 min ·
ArticleEndpoint management explained for business owners
Understanding endpoint management and why it is critical for keeping company data safe on laptops, phones, and desktops.
- PROTECT
- AUTOMATE
- EMPOWER
6 min ·
ArticleDo you need a business firewall? What small businesses should know
A plain-language guide on why a dedicated business firewall is a non-negotiable security requirement for modern small businesses.
- PROTECT
6 min ·
ArticleThe FTC Safeguards Rule: who it covers and what it requires
The FTC Safeguards Rule requires non-banking financial institutions to protect customer data. Find out if your business is covered and what you need to do.
- PROTECT
6 min ·
ArticleThe gift card scam: why it still works on busy offices
The gift card scam is a persistent form of social engineering where attackers trick employees into buying and sending gift card codes under the guise of an urgent corporate request.
- PROTECT
6 min ·
ArticleGLBA compliance in plain English for financial firms
The Gramm-Leach-Bliley Act requires financial institutions to explain their information-sharing practices and protect sensitive data. Learn the basics for your firm.
- PROTECT
6 min ·
ArticleGoogle Business Profile tips for more calls and reviews
Improve your local visibility with these Google Business Profile tips. Learn how to get more customer reviews and phone calls by setting up your profile correctly.
- AUTOMATE
- EMPOWER
6 min ·
ArticleGoogle Workspace security settings every admin should check
A checklist of the most important google workspace security settings to protect your small business from phishing, data leaks, and unauthorized access.
- PROTECT
- EMPOWER
6 min ·
ArticleThe help desk became the front door: lessons from Twilio and Okta
A retrospective look at the 2022 '0ktapus' campaign and how attackers used text messages to walk through the front door of major tech companies.
- PROTECT
- EMPOWER
6 min ·
ArticleA HIPAA compliance checklist for small practices
Protecting patient health information requires more than just a locked door. Use this HIPAA compliance checklist to audit your physical, technical, and administrative safeguards.
- PROTECT
6 min ·
ArticleHow to choose an MSP: 12 questions to ask before you sign
A comprehensive guide on how to choose an MSP that fits your business needs, with 12 critical questions and tips for evaluating potential partners.
- PROTECT
- EMPOWER
- AUTOMATE
6 min ·
ArticleHow to get into cybersecurity with no experience
Breaking into a new field can feel overwhelming, but a clear roadmap makes it possible. Learn how to get into cybersecurity with no experience by building practical skills and finding the right entry path.
- EMPOWER
6 min ·
ArticleHow to prevent ransomware: a practical plan for small businesses
A clear, step-by-step guide for small business owners on how to prevent ransomware by securing backups, training staff, and closing technical gaps.
- PROTECT
7 min ·
ArticleIn-house IT vs managed IT: an honest comparison for growing businesses
A detailed comparison of in-house IT vs managed IT models to help growing businesses determine the most cost-effective and secure way to support their operations.
- EMPOWER
- AUTOMATE
- PROTECT
6 min ·
ArticleKaseya: when one supplier hit a thousand businesses at once
The 2021 Kaseya VSA attack showed how a single vulnerability in a trusted IT tool can reach thousands of small businesses. Learn how to manage your vendor risk.
- PROTECT
6 min ·
ArticleLead response time: why speed decides who wins the job
Your lead response time is often the difference between a new customer and a lost opportunity. Learn how to use automation to ensure you're always the first to reply.
- AUTOMATE
- EMPOWER
6 min ·
ArticleLog4Shell: the flaw that lived in software nobody knew they ran
A look back at the 2021 Log4j crisis and why knowing every component in your software inventory is the only way to stay ahead of internet-wide attacks.
- PROTECT
6 min ·
ArticleManaged detection and response (MDR): how it works and who needs it
Explore how managed detection and response provides 24/7 security monitoring for small businesses that don't have their own internal security team.
- PROTECT
6 min ·
ArticleManaged IT services for small business: what you should actually get
A practical guide to understanding managed IT services for small business, covering proactive support, security essentials, and how to choose the right partner.
- EMPOWER
- PROTECT
- AUTOMATE
6 min ·
ArticleMFA fatigue attacks: when approval prompts become the weak spot
An MFA fatigue attack, or push bombing, is a technique where attackers overwhelm a user with authentication requests until the victim accidentally or out of frustration approves one.
- PROTECT
6 min ·
ArticleWhat the MGM Resorts breach taught businesses about phone calls
A review of the 2023 MGM Resorts attack, where a simple phone call to the help desk led to days of total operational shutdown.
- PROTECT
- EMPOWER
6 min ·
ArticleDoes Microsoft 365 back up your data? What you need to know
Many small businesses assume Microsoft 365 backs up their data automatically. This article explains the difference between availability and backup.
- PROTECT
6 min ·
ArticleMicrosoft 365 security best practices for small businesses
A guide to the essential Microsoft 365 security best practices that every small business should implement to protect their email and files.
- PROTECT
- EMPOWER
6 min ·
ArticleMOVEit: one file transfer tool, thousands of victims
A look at the 2023 MOVEit breach and what it taught businesses about the hidden risks in their vendor supply chains.
- PROTECT
6 min ·
ArticleUsing the NIST Cybersecurity Framework at a small business
The NIST Cybersecurity Framework is a gold standard for managing risk. Learn how to adapt its core functions for a smaller team.
- PROTECT
6 min ·
ArticlePasskeys explained: the end of passwords for your team
Learn about passkeys, the new security standard that is faster and more secure than traditional passwords, and how to prepare your business for a password-less future.
- PROTECT
- EMPOWER
- AUTOMATE
6 min ·
ArticleHow to roll out a password manager for business
Learn the practical steps to implement a password manager for business, improve your team's security, and eliminate the risk of shared passwords on sticky notes.
- PROTECT
- EMPOWER
6 min ·
ArticlePCI compliance for small business: what card-taking businesses must do
Every business that accepts credit cards must follow the PCI Data Security Standard. Learn the steps to secure your payments and stay compliant.
- PROTECT
6 min ·
ArticleWhat drives penetration testing cost (and how to scope one)
Understand the factors that influence penetration testing cost and learn how to get the most value from a security assessment for your small business.
- PROTECT
6 min ·
ArticlePhishing email examples: 10 real patterns and how to spot them
Review these common phishing email examples to train your team on how to identify and report deceptive messages before they cause a data breach.
- PROTECT
6 min ·
ArticleQR code phishing (quishing): what to watch for
QR code phishing, or quishing, is a growing threat where attackers use malicious QR codes to bypass security filters and steal credentials from mobile users.
- PROTECT
6 min ·
ArticleReal estate wire fraud: how closings get hijacked and how to stop it
Real estate wire fraud is one of the most common and costly threats to home buyers and sellers. Learn how these scams work and what steps you can take to prevent a closing from being hijacked.
- PROTECT
6 min ·
ArticleRemote work security tips for small teams
Protecting your business data when your team works from home requires a new approach. These remote work security tips help you stay safe outside the office.
- PROTECT
- EMPOWER
7 min ·
ArticleSalt Typhoon: what telecom espionage means for your vendor list
An analysis of the Salt Typhoon intrusions into U.S. telecommunications providers and why businesses must apply zero-trust principles to their entire supply chain.
- PROTECT
6 min ·
ArticleSecurity awareness training that people actually remember
Most employees forget their yearly compliance videos. Effective security awareness training uses frequent, short lessons and real-world testing to change how people treat emails and links.
- PROTECT
6 min ·
ArticleShadow IT: the apps your team uses that you don't know about
Understand shadow IT, the risks it creates, and how to manage the apps your team brings to work without formal approval.
- PROTECT
- EMPOWER
- AUTOMATE
6 min ·
ArticleSeven signs your business has outgrown its IT setup
Recognize the signs that your current IT support model can no longer keep up with your growing business, from recurring issues to security gaps.
- EMPOWER
- AUTOMATE
- PROTECT
6 min ·
ArticleSIM swapping: how attackers steal your phone number
SIM swapping is a form of identity theft where an attacker tricks a mobile carrier into porting a victim's phone number to a new device, allowing them to bypass SMS-based multi-factor authentication.
- PROTECT
6 min ·
ArticleHow to plan a small business IT budget without guessing
A practical approach to building a small business IT budget that balances operational needs with essential security and growth investments.
- EMPOWER
- AUTOMATE
- PROTECT
6 min ·
ArticleSmishing: how text message scams target your employees
Smishing uses deceptive text messages to trick employees into revealing sensitive information or downloading malware onto their mobile devices.
- PROTECT
6 min ·
ArticleSnowflake: stolen passwords, missing MFA, exposed customer data
A retrospective on the 2024 Snowflake data thefts, where stolen credentials and a lack of MFA led to massive breaches at major consumer brands.
- PROTECT
6 min ·
ArticleSOC 2 for small business: when customers start asking for it
A SOC 2 report proves your business handles customer data securely. Learn how to prepare for your first audit without getting overwhelmed.
- PROTECT
6 min ·
ArticleTax season scams that target small businesses and their staff
Tax season scams increase every year as cybercriminals use the pressure of filing deadlines and the promise of refunds to steal sensitive employee data and corporate funds.
- PROTECT
7 min ·
ArticleHow one contractor's stolen password reached Uber
The 2022 Uber breach showed that even strong security can be worn down by persistence, social engineering, and hard-coded passwords.
- PROTECT
- AUTOMATE
6 min ·
ArticleVendor risk management for small businesses
Your security is only as strong as your weakest partner. Learn how to implement vendor risk management to protect your data and stay compliant.
- PROTECT
8 min ·
ArticleVishing: phone scams that trick staff into giving access
Vishing, or voice phishing, uses phone calls and social engineering to manipulate employees into sharing confidential information or granting remote access.
- PROTECT
6 min ·
ArticleVulnerability scanning: what it finds and how often to run it
Learn how vulnerability scanning helps small businesses find and fix security holes before hackers can exploit them, and how to set a schedule that works for you.
- PROTECT
6 min ·
ArticleWhat is a SOC? Security operations centers explained
Learn what is a SOC, how these command centers protect your business data, and why you don't need to build one yourself to stay safe.
- PROTECT
6 min ·
ArticleWhat is EDR? Endpoint detection and response in plain English
Learn what is EDR, how it goes beyond basic antivirus to protect your company laptops, and why it is a critical tool for stopping modern ransomware.
- PROTECT
6 min ·
ArticleWhat is XDR, and does a small business need it
Discover what is XDR and how it combines data from your network, email, and cloud to stop sophisticated cyber attacks that target small businesses.
- PROTECT
- AUTOMATE
6 min ·
ArticleWhat to do after a data breach at your business
A guide for small business owners on the immediate technical, legal, and reputational steps to take after discovering a data breach.
- PROTECT
6 min ·
ArticleWorkflow automation for small business: where to start
Workflow automation doesn't require a large IT budget. By connecting the tools you already use, you can eliminate hours of manual data entry and keep your team focused on high-value work.
- AUTOMATE
6 min ·
ArticleZero trust for small business, without the jargon
Learn what zero trust for small business really means and how to implement a 'never trust, always verify' strategy to protect your remote team.
- PROTECT
6 min ·
Get new articles by email.
One short email when something new is published. No sales emails.
Let's look at your business together.
A 30-minute call. No cost, no pressure, and honest answers.