The IT checklist every small business should run through

Small businesses rarely have an IT department, so IT tends to happen in a rush when something breaks. A short checklist, worked through once and reviewed every few months, prevents most of the painful surprises.

Backups you have actually tested

A common rule of thumb is 3-2-1: three copies of important data, on two different types of storage, with one copy kept off site or in the cloud. Just as important, restore a file from your backup now and then. A backup you have never tested is a guess.

Accounts and passwords

• Turn on multi-factor authentication for email, banking, accounting and your website.
• Use a password manager instead of a shared spreadsheet or sticky notes.
• Give each staff member their own account rather than sharing one login.
• When someone leaves, remove their access the same day.

Updates

Switch on automatic updates for computers, phones, routers and point-of-sale devices where possible. Old, unpatched software is one of the easiest ways in for attackers.

Network basics

• Change the router's default admin password.
• Keep a separate guest Wi-Fi network away from staff and payment devices.
• Know where your network gear lives and label it.

Write it down

Keep a simple document listing your internet provider, account numbers, where the router and backups are, and which services you pay for. Store passwords in the password manager, not in the document.

Know who to call

Decide in advance who you will call when something breaks, rather than searching in a panic. Find local IT support, or browse technicians with cybersecurity skills.