Protect business and customer information

Map the information and reduce exposure

List customer, employee, financial, and operational information, where it is stored, who can access it, and how long it is needed. Stop collecting data that serves no clear purpose. Keep sensitive records out of ordinary chat threads and shared folders with broad access. Identify vendors that hold copies and confirm how information can be exported or deleted under the agreement and applicable obligations.

Protect the accounts and the recovery path

Use unique passwords, multifactor authentication where available, timely software updates, and role-based permissions. Remove access promptly when responsibilities end. Maintain backups appropriate to the business and test restoration, rather than assuming a successful backup message means recovery will work. Train staff to verify unusual payment or information requests through a separate trusted channel. These are ongoing operating habits, not a one-time software purchase.

Write a response plan before an incident

Identify who leads the response, who can contact technology support, and how the business continues critical operations. Preserve relevant evidence and obtain qualified help with containment and any required notifications. Keep a safe offline copy of emergency contacts. Run a tabletop exercise such as a lost laptop or compromised email account and record what the team could not answer. Update the plan based on that exercise.

• Inventory sensitive information and justify its collection.
• Limit permissions and enable multifactor authentication.
• Test a backup restoration and document the result.
• Assign incident roles and practice a realistic scenario.