Five free security settings every small team should switch on

Most cyber attacks on small businesses are not sophisticated. They rely on a reused password, a missing update or an email that looks real enough. The good news is that the most effective protections are free and take an afternoon to switch on.

Work through these five settings with your team. Each one closes a door that attackers commonly use.

01Two-step sign-in on everything important

Also called multi-factor authentication, this asks for a code from your phone as well as your password. Even if a password is stolen, the account stays locked.

02Automatic updates on every device

Updates fix security holes that attackers already know about. Turn on automatic updates for computers, phones, browsers and key software, and restart devices regularly so the updates actually install.

03Backups you have actually tested

A backup is only useful if you can get your files back. Keep at least one copy of important files separate from your everyday systems, and test restoring a file every few months.

04A password manager for the team

A password manager creates and remembers a different strong password for every account, so one leaked password does not open everything. Most offer business plans that let you share logins safely without sending them by email or text.

05Tidy up who has access

Former staff, old contractors and shared logins are common weak points. Review who can access your email, files, bank and software, remove anyone who no longer needs it and keep administrator access to as few people as possible.

The Australian Cyber Security Centre also publishes free guides for small businesses at cyber.gov.au, which are worth sharing with your team.

This article is general information only. Every business is different, so review your own systems or ask for help if you are unsure.