Security checklist for small businesses

10 points that cover most of the risks for a team of up to 25 people: devices, email, backups, passwords and training.

Check your company against this list — each point is either already covered or has an owner and a date.

1. antivirus protection on every workstation (ESET endpoint protection);
2. file server protection (Server Security);
3. email phishing protection (Mail Security or Cloud Office Security for M365/Google);
4. laptop encryption (ESET encryption solutions);
5. two-factor authentication for critical services (ESET Secure Authentication);
6. prompt OS and software updates (vulnerability management);
7. backups of critical data — kept separate from the work network;
8. least privilege: admin access only for those who need it;
9. training the team to spot phishing;
10. an incident response plan: who notifies whom and what gets switched off.

For teams with 5–25 devices, points 1–5 are covered by one product — ESET Small Business Security. More devices? A quote for your network.