How to Secure Your Small Business
Network in 10 Steps

Document every device on your network: routers, switches, computers, servers, printers, phones, IoT devices (cameras, POS systems), and cloud services. Use a simple spreadsheet or free tools like Angry IP Scanner.

• Include make, model, and location
• Note which devices handle sensitive data
• Update inventory quarterly

• Change default admin username and password
• Enable WPA3 (or WPA2/WPA3) encryption
• Disable WPS and UPnP
• Enable built-in firewall, turn off remote management
• Update firmware immediately
• Consider business-grade routers (Ubiquiti, TP-Link Omada, Firewalla)

• Use a password manager with unique, strong passwords
• Enable MFA on all accounts (email, banking, cloud services)
• Prefer authenticator apps or hardware keys over SMS
• Implement role-based access (least privilege)

• Main business devices
• Guest/Visitor Wi-Fi (isolated)
• IoT devices (cameras, smart devices)
• Point-of-sale systems
• Use VLANs or separate guest networks

Segmentation limits damage if one part is compromised — a hacked camera can't reach your finance PC.

• Enable automatic updates for Windows, macOS, and software
• Patch vulnerabilities promptly — most attacks exploit known issues
• Use centralized patch management if you have multiple computers
• Don't forget routers, printers, and other networked devices

• Install reputable antivirus/EDR on all computers (Microsoft Defender for Business, Bitdefender, Malwarebytes)
• Enable firewall on every device
• Use DNS filtering (Quad9 or OpenDNS) to block malicious sites

• Never expose plain Remote Desktop (RDP) to the internet
• Use a business VPN (Tailscale, WireGuard, or NordVPN Teams)
• Enforce MFA on all remote connections

• Conduct basic security awareness training (phishing, password hygiene)
• Create a simple Acceptable Use Policy
• Run simulated phishing tests quarterly

• 3 copies of your data
• 2 different media types (local + cloud)
• 1 offsite backup (cloud)
• Use Backblaze, Microsoft 365 Backup, or local NAS with encryption
• Test restores monthly — backups are useless if they don't work

• Enable logging on router and key devices
• Use affordable monitoring (GlassWire, Microsoft Defender alerts)
• Create a basic incident response plan: who to call, how to isolate devices, customer notification process
• Review security monthly