Owner guides.
Practical answers.
Thirty practical guides for small business owners. Find a topic, get a clear answer and bring the right questions to your IT provider.
Minnesota based · Preparing for launch · Scope agreed before work begins
30 guides available. Search runs only in your browser.
Access & accounts
Multi-factor authentication for a small business
Where should our business start with MFA?
Read the guide ↗↗Who has administrator access to your business?
How many administrators should a small business have?
Read the guide ↗↗Employee offboarding security checklist
What should happen to access when someone leaves?
Read the guide ↗↗Planning a business password manager
Is a password manager enough to secure our accounts?
Read the guide ↗↗External file sharing for small business
How should we review external file sharing?
Read the guide ↗People & devices
Remote work security planning
What matters most when staff work remotely?
Read the guide ↗↗Small business device inventory guide
Why do we need a device inventory?
Read the guide ↗↗Who owns software updates?
Who should be responsible for patching?
Read the guide ↗↗A practical phishing reporting process
What should employees do with a suspicious email?
Read the guide ↗↗Verify payment-detail changes before acting
How can we handle a request to change bank details?
Read the guide ↗Continuity & recovery
Backup versus recovery: what owners should ask
Does a successful backup mean we can recover?
Read the guide ↗↗Recovery objectives in plain language
What are RTO and RPO?
Read the guide ↗↗What should a restore-test record show?
What evidence helps us understand a recovery test?
Read the guide ↗↗Build an incident contact plan
Who should a business call first during a suspected incident?
Read the guide ↗↗Planning a small business incident discussion
What is an incident tabletop discussion?
Read the guide ↗Buyer guides
Compare CX’s planned reviews ↗ · Find answers about CX ↗
What affects cybersecurity assessment cost?
How much should a small business assessment cost?
Read the guide ↗↗How to choose a cybersecurity provider
How should we compare cybersecurity providers?
Read the guide ↗↗Assessment versus penetration test
Is an assessment the same as a penetration test?
Read the guide ↗↗Security reviews alongside your IT provider
Will a security assessment replace our IT provider?
Read the guide ↗↗Preparing evidence for cyber insurance questions
How should we answer cyber insurance security questions?
Read the guide ↗↗Questions to ask a critical technology vendor
What should we ask a vendor before relying on it?
Read the guide ↗Industry guides
Cybersecurity questions for a small law firm
Where should a small law firm begin a security review?
Read the guide ↗↗Cybersecurity questions for accounting firms
What should an accounting practice discuss with its IT provider?
Read the guide ↗↗Cybersecurity questions for consulting teams
How can a consulting team organize security responsibilities?
Read the guide ↗↗Cybersecurity questions for construction offices
What security questions matter for a construction business office?
Read the guide ↗↗Cybersecurity questions for small nonprofits
How can a nonprofit prioritize a security discussion?
Read the guide ↗Business changes
Security questions when your team grows
What should change when we add more staff?
Read the guide ↗↗Security questions when changing IT providers
What should we clarify before changing IT providers?
Read the guide ↗↗Customer security questionnaires for small businesses
How should we respond to a customer’s security questionnaire?
Read the guide ↗↗Prepare for your first security assessment
What should we prepare before an assessment?
Read the guide ↗Plan your next step
Start with the business.
Get clear on the risk.
Tell us what your company does, the size of your team and what prompted your enquiry. We’ll discuss fit and the scope needed before proposing work.
Preparing for launch. Enquiries are welcome; delivery dates and engagements require finalized onboarding and a written agreement. Please do not email passwords or sensitive security evidence.