Cybersecurity Basics

Acceptable Use Policy for small business — what an AUP is, the sections every policy needs, sample language, and how to roll it out and enforce it.

What single sign-on is, how SSO improves security and offboarding, the trade-off to manage, and how a small business can adopt it.

QR code phishing slips past email filters by hiding links in images. Learn how quishing works and how to protect your small business.

How device encryption protects lost and stolen devices, plus step-by-step setup for BitLocker and FileVault and managing recovery keys.

Vendors and third parties represent cybersecurity risk. Learn to assess vendor security, contractually require controls, and protect against vendor breaches.

Cloud collaboration tools enable teamwork but create security risks. Learn to safely use Teams, Slack, Google Drive, and OneDrive without exposing sensitive data.

Cybersecurity metrics track security effectiveness and ROI. Learn which KPIs matter for small business and how to measure your security program’s success.

How to conduct a cybersecurity risk assessment for small business — asset inventory, threat identification, gap analysis, risk scoring, and creating a prioritized remediation plan with free tools.

Password security best practices for small business in 2026 — what NIST now recommends, outdated policies to abandon, the business password policy framework, and how to drive team adoption.

Two-factor authentication vs multi-factor authentication — what the difference is, the three factor categories, why SMS is the weakest second factor, and which MFA type to use for each account.