Security fundamentals that work.
Armstrong County - at least in the Kittanning/Ford City area - presents a number of challenges for small business owners.
- The area has frequent, brief electrical outages. Maybe only a couple of seconds, maybe longer. That is a business continuity issue and you have to plan for it.
- There is the belief that small businesses don't attract the attention of the 'bad guys'.
Wishful thinking, I am afraid. The "bad guys" expect small businesses to be less protected. This makes your business a great test lab for malware.
The good news is that a micro-business probably won't need to buy a lot of expensive, enterprise-level cybersecurity protection. You do not have to know everything about cybersecurity. You do need to understand what threats your business is most likely to face, how to turn on basic protections against those threats, and have a plan in place for when something happens.
Start Here: What do you want to do?
Add Cybersecurity Planning To New Business
Setting up initial infrastructure, choosing secure email, establishing password policies, are some of the steps for building baseline security into your business plan. Yes, there probably will be additional costs. However, building security in at the beginning typically costs less than adding it in later.
Add Countermeasures To An Existing Business
If you have been in business for a while, you have acquired equipment, perhaps hired an employee or two, and developed methods - workflows. Your first step is to assess your security posture by reviewing your current workflows for security. This includes examining device configurations, auditing user access, checking offline and cloud backups, and then fixing the security gaps that you find.
Explore Security Topics
Browse our list of the most common threats and proposed solutions. Our list is divided into 7 practical business categories and ranked by how critical each threat is. The list is most common threats - not all threats.
Our plan is to update the list as new threats emerge.
Have a Question?
Often, especially with cybersecurity, "You don't know what you don't know.". Information provided on this site is educational - it is intended to address that first "Don't Know".
It is not intended to replace professional legal, regulatory, insurance, or incident-response advice when those services are needed.