Where to begin.
DAY ONE
Change the password on your email to a unique generated one Enable the second step on email Install a password manager
DAY TWO
Enable the second step on your domain registrar, hosting and bank Check recovery addresses are current and independent of your own domain
DAY THREE
Confirm updates are enabled on every device Enable screen locks and encryption
DAY FOUR
Establish where backups are, or set them up Confirm one copy is separated from your live systems
DAY FIVE
List every account, device and service Remove access for anyone who has left
DAY SIX
Store your two-factor recovery codes somewhere separate Test recovering one account without your usual device
DAY SEVEN
Write down who to contact in an incident Tell your team the verification rule for payments
WHAT THAT ACHIEVES
Most of the protection available to a small business.
WHAT IT COSTS
A few hours and a password manager.
