Articles liés à The Small Business Security Playbook: A Four-Category...

The Small Business Security Playbook: A Four-Category Framework for Owners Without an IT Team - Couverture rigide

Sylvan Press

 
9798951893734: The Small Business Security Playbook: A Four-Category Framework for Owners Without an IT Team

Synopsis

You are the owner. You are also the IT department.

Nobody ever explained what "do something about cybersecurity" is supposed to mean. Most of the advice you can find is written either for companies that already have a security team, or as a list of frightening statistics that ends in a sales pitch. Neither tells you what to do on Monday morning.

This is a working framework for the business owner who has no IT staff and no intention of becoming a security specialist. Four categories cover the ground that matters:

  • Who can get in. Accounts, passwords, multi-factor authentication, and what happens to access when someone leaves.
  • What they can take. Knowing which of your data would actually hurt to lose, and how long you are keeping it.
  • How you survive a bad day. Backups that have been tested, and a plan for the morning something is encrypted or gone.
  • How your own software stops being the way in. Updates, patching, and the tools your team signed up for without telling you.

Three businesses run through the book: a 22-person consulting firm, a merchant selling through Shopify, and a four-person clinic. They have different budgets, different regulators, and different things worth stealing. One of them will look like yours.

The back of the book is the part most people use twice

  • A sixteen-question assessment you score yourself, so you can see where you actually stand
  • Ten security policy templates, written to be edited rather than admired
  • Six tabletop exercises with scripts: practice runs where you talk a bad day through as a team before you have one
  • A vendor security questionnaire for checking who you are about to trust
  • A worksheet for finding the apps your team signed up for without telling you, a checklist for locking down the personal phones and laptops your team works from, and a phishing card to pin by the desk

Three more chapters cover what to do in the first 48 hours of an incident, how to work out which rules actually apply to you, and what to do when you are the entire company.

Plain English throughout. No certifications required, no budget assumed, and no pretending that any book makes you secure.

Sylvan Press is the security imprint of Sylvan Assurance, LLC.

Les informations fournies dans la section « Synopsis » peuvent faire référence à une autre édition de ce titre.