⚡ Limited Availability — Accepting 3–4 New Clients This Quarter  |  Schedule Your Free Risk Review →

Small Business · Free Resource

NYC SMB Cybersecurity Checklist

12 areas to audit before something forces the audit on you — passwords, email, endpoints, and backup. Save this page or print it (Ctrl/Cmd+P).

1
Access
Unique, strong passwords with a password manager in use org-wide
Reused or weak passwords remain the single most common way small businesses get breached.
2
Access
Multi-factor authentication on email, banking, and cloud admin accounts
The highest-leverage control against credential theft — cheap, fast, and effective.
3
Network
Firewall configured and actively monitored
Not just "on" — someone should actually be watching what it's blocking and flagging.
4
Endpoints
Endpoint protection (antivirus/EDR) installed and current on every device
Including laptops that leave the office — those are the ones most often missed.
5
Endpoints
Automatic OS and software patching enabled
Most real-world breaches exploit a vulnerability that was already patched months earlier.
6
Email
Email security / anti-phishing filtering in place
Phishing is still the most common way attackers get their first foothold.
7
Continuity
Backup running daily, stored offsite/cloud, and tested for restore
A backup nobody has ever restored from is a hope, not a plan.
8
Network
Guest Wi-Fi separated from the business network
A visitor's compromised phone shouldn't have a path to your servers.
9
Access
Departing-employee access revoked the same day
Former employees with live credentials are a common, avoidable exposure.
10
Response
Written incident response plan — who to call, what to do first
Decided in advance, not figured out during the incident.
11
Insurance
Cyber insurance in place and checked against actual controls
Many policies require MFA and tested backups to actually pay a claim.
12
People
Security awareness training for all staff, at least annually
Technology controls only go so far when a person can be talked into clicking the wrong link.

Score Yourself

10–12 checked Strong postureMinor gaps — worth a second look, not an emergency.
6–9 checked Moderate exposureReal gaps — plan to close these this quarter.
0–5 checked High riskAct now — this is the profile of a business a breach would put out of business.

This page is yours to keep — bookmark it, print it, or share it with whoever handles your IT.

Free Consultation

Want Wlad to Score This For You?

Book a free 30-minute Risk Review. Wlad will walk your actual environment against this exact checklist and give you a written report within 24 hours — at no charge.

Schedule My Free Risk Review →

Questions first? Send us a message or call (516) 734-1515