Security Guide for Companies

Practical security guidance for small and medium businesses. No dedicated IT team required, most recommendations are free to implement.

Every guide. Every walkthrough. Kept current.

Members get every guide, every walkthrough, kept current when Apple changes things. All included. No spam.

Create your account

Already a member? Sign in

Your library — all included

Every guide and walkthrough is open to you, kept current when Apple changes things.

Browse your guides

All Security Advice

14 items
  1. 1

    Prevent Ransomware Attacks

    Learn how to protect your business from ransomware through practical security measures and employee training.

    Featured
  2. 2

    Stop Letting Employees Casually Browse the Internet on Work Computers

    Everyone has a cellphone. Ask them to browse on their personal device. Prohibiting casual Internet browsing will significantly reduce the risk of getting hacked.

    Basics
  3. 3

    Don't Give Everyone Access to Email

    Sometimes giving someone access to corporate email is more trouble than it's worth. If you have employees who don't need to communicate with people outside of the company by email, then turn off their email accounts.

    Basics
  4. 4

    Require Multi-Factor Authentication at all Costs

    Ignore the complaints and groaning and enforce Multi-Factor authentication or you are going to get hacked. Simple as that.

    Basics
  5. 5

    Take Away Admin Rights

    Don't let employees install their own software. Many ransomware attacks start with someone thinking they need to install something.

    Basics
  6. 6

    Antivirus Is Required If People Are Browsing the Internet and Opening Emails

    Computer viruses don't just show up on your computer out of the blue. You get them from browsing the Internet, or they come packaged in an email. If you don't have tight control over what kinds of websites employees are browsing, or what kinds of emails they interact with, then you will need antivirus software. I recommend Windows Defender.

    Basics
  7. 7

    Force Password Changes at Least Once a Year

    The consensus in 2024 from Microsoft, NIST, and many others is that password changes are bad and make people come up with worse passwords. I think there is some truth in that, but also think it's common sense that changing a password sometimes is better than never changing it. So changing it once a year seems reasonable enough.

    Basics
  8. 8

    Enforce Auto Updates

    Resist the complaints about reboots, stand strong and make sure auto updates are enabled.

    Basics
  9. 9

    Force Sync and Backup to Cloud Storage

    Backup so that you don't have to care about losing data if an employee's computer gets lost, stolen, or ransomwared.

    Basics
  10. 10

    No More Old-Timey File Shares

    Your file share is what is going to get ransomwared. Move files to cloud storage like OneDrive and SharePoint.

    Basics
  11. 11

    Disable all Macros!

    Macros in Office files are commonly used to install ransomware. Unless you have a specific business need for macros, disable them completely across your organization.

    Basics
  12. 12

    Consider Macs if possible

    Windows is a great platform, but most malware and ransomware is currently designed to target Windows rather than Mac. While this could change in the future, right now Macs face fewer malware threats simply because they're less targeted.

    Basics
  13. 13

    Tell and Remind Employees: You Will Never Ask Them to Buy Gift Cards!

    Even if your company occasionally has legitimate gift card purchases, tell employees that management will NEVER ask them to buy gift cards. Make them truly believe this. Scammers are attempting this trick daily, pretending to be executives asking for urgent gift card purchases.

    Basics
  14. 14

    Keep Work and Personal Email Separate

    Advise employees not to use company email for personal services or registrations. When work and personal life blend in email, employees become less cautious about clicking links and downloading attachments.

    Basics

No results found. Try a different search term.

Guides