A 12-Point Cyber Security Checklist for SMEs

Security investment does not have to start with a big budget. Applied correctly, the controls below prevent a significant share of incidents.

1. Multi-factor authentication
2. Separated administrator accounts
3. Regular patch management
4. Immutable backups
5. Restore drills
6. Email security (SPF, DKIM, DMARC)
7. Endpoint protection and EDR
8. Network segmentation
9. Log collection and retention
10. User awareness training
11. Supplier access control
12. Incident response plan