Topic 6: Common Operational Questions (FAQ)

Direct, practical answers to everyday security questions local business owners ask when hardware fails, power drops, or suspicious pop-ups appear.
Having said that, the first part of nearly every answer starts with "It depends..."

Everyday Technical Questions

Clear guidance without (too much) technical jargon for common small business situations.
Need to know more? Leave a question on the Contacts page.

1. My hard drive crashed. Is all my business data gone?

Why It’s a Threat: Mechanical hard drive failure without automated backups can mean total loss of local business records.

Real-World Example: A primary computer drive stops responding and there is a clicking sound.

Solution: Tested backups are the best protection for many problems. If you have an active cloud backup or external drive used for scheduled backups, your data can be restored to a new drive. If your data was not unbacked up, consult a data recovery specialist before writing off the physical drive.

2. How do I protect my gear from a sudden power surges and outages?

Why It’s a Threat: Sudden power drops may damage computer systems and storage drives. When power is restored, there may be a power surge, which may also damage devices.

Real-World Example: A storm cuts power mid-day. The office computer, plugged into a standard power strip, will not start when power is restored.

Solution: Plug critical computers and network gear into an Uninterruptible Power Supply (UPS) battery backup to allow time for system shutdowns during outages. Surge protectors are suitable for guarding sensive electronics such as monitors, printers and routers from power surges.

3. What if I accidentally clicked a link in a suspicious email?

Why It’s a Threat: Clicking malicious links can trigger background script downloads or direct you to credential-harvesting forms.

Real-World Example: An employee clicks a link in a fake invoice email and before realizing the destination URL looks suspicious.

Solution: This is a "system event". You do not know yet whether it is a "security incldent", but you still have to take precautions.
Disconnect your computer from the internet immediately (unplug the Ethernet cable or turn off Wi-Fi) to stop communication with remote servers, and immediately report a system event.

4. A screen popped up saying all my files are encrypted and I have to pay for the password to get my data back. What now?

This is clearly a security incident. However your data may not be encrypted. The 'bad guys' have been know to lie.
Your response will be determined in the Incident Response investigation.

Why It’s a Threat: Ransomware encrypts local files and scans local network shares to infect connected business computers.

Real-World Example: An extortion popup replaces the desktop background, demanding cryptocurrency to unlock local files.

Solution: Disconnect the device from your network immediately (unplug Ethernet or disconnect Wi-Fi) to stop the infection from spreading to other PCs and to prevent your files from being uploaded.
Do not turn off the computer. Contact technical support immediately.

5. What if I already have a long, hard password? Isn't that enough?

Why It’s a Threat: Passwords can still be compromised through third-party website breaches or keyloggers (hidden programs that record what you type.) regardless of password length.

Real-World Example: A complex password used on a web portal is leaked during a vendor site breach, allowing attackers to try it on your business email accounts.

Solution: The rule about not using the same password for different accounts still applies. Pair long passwords with Multi-Factor Authentication (MFA) across all business accounts so a stolen password alone cannot grant access. Do not reuse passwords.

6. What if clients or visitors ask to connect to my office Wi-Fi?

Why It’s a Threat: Connecting guest hardware to primary Wi-Fi places untrusted personal devices on the same network layer as internal PCs and printers.

Real-World Example: A client connects their mobile to your main office Wi-Fi, allowing an infected app on their phone to probe local business devices.

Solution: Provide access exclusively through a restricted Guest Wi-Fi network that isolates visitors from internal business devices.

7. Do I really need a System Security Survey?

Why It’s a Threat: Operating for years without an audit allows silent security misconfigurations to accumulate unnoticed.

Real-World Example: Hardware and cloud tools are added over time without anyone verifying whether backups or MFA were configured properly.

Solution: An outside specialist reviews your hardware, software settings, backup health and security procedures, providing a plain-language list of fixes to improve your business' security.