Money systems.
WHAT TO PROTECT
Banking Payment gateways Accounting systems Anywhere payment details are held
WHAT TO DO
Individual accounts, never shared A second authentication step on everything Authorisation limits appropriate to each person Transaction alerts enabled
THE ALERTS POINT
Transaction notifications are your earliest warning of unauthorised activity.
Enable them and read them.
WHAT TO SEPARATE
Where practical, the person who prepares a payment is not the person who approves it.
For a very small business, a deliberate verification step instead.
WHAT TO MONITOR
Changes to payment details Unexpected transactions New payees
WHAT TO RECONCILE
Bank statements against your records, monthly.
That is how unauthorised transactions are found.
WHAT NEVER TO DO
Access banking from a shared or public device Approve a request without verifying it independently
WHAT TO REVIEW
Who has access and at what limit, quarterly.
