Cybersecurity for SMBs: 10 essential measures

SMBs facing cyber threats

SMBs are prime targets for cyberattacks. According to ANSSI, 43% of the cybersecurity incidents reported in France involve SMBs. Attackers target the least protected companies, not the largest. A ransomware that encrypts your data can paralyze your business for days or weeks. This guide covers the 10 essential measures every SMB should put in place.

1. Two-factor authentication (2FA)

2FA is the most effective measure against account compromises. Even if a password is stolen, the attacker cannot sign in without the second factor. Enable 2FA on all critical accounts: email, cloud, banking, social media. Google Workspace and Microsoft 365 let you enforce 2FA for all users.

2. Strong and unique passwords

Each account must have a unique password of at least 12 characters. A password manager (Bitwarden, 1Password) generates and stores complex passwords for each service. Prohibit password reuse between professional and personal accounts.

3. Automated and tested backups

Back up your critical data automatically, daily, to a location separate from your main infrastructure. The 3-2-1 rule recommends 3 copies of your data, on 2 different media, including 1 off-site. Test the restore regularly: an untested backup is a backup that may not work.

4. Systematic updates

Security updates fix known vulnerabilities. Enable automatic updates on all operating systems, browsers and applications. Unpatched vulnerabilities are the most common entry point for attackers.

5. Phishing training

Phishing is the most common attack vector. Train your teams to recognize suspicious emails: unusual sender, artificial urgency, dubious links, unexpected attachments. Organize phishing simulations to test and reinforce vigilance.

6. Data encryption

Encrypt sensitive data at rest and in transit. Cloud suites (Google Workspace, Microsoft 365) encrypt data by default. For workstations, enable BitLocker (Windows) or FileVault (macOS). For communications, use HTTPS and VPNs for remote access.

7. Access and privilege management

Apply the principle of least privilege: each user has only the access necessary for their work. Immediately revoke the access of employees who leave the company. Audit permissions regularly to detect excessive access.

8. Network segmentation

Segment your network into zones: internal network, guest network, IoT network. A compromised device on the guest network must not be able to access internal servers. Firewalls and VLANs implement this segmentation.

9. Incident response plan

Document the procedure to follow in case of an incident: who to contact, how to isolate the compromised system, how to communicate internally and externally. A tested plan reduces reaction time and limits damage.

10. Monitoring and detection

Monitor suspicious sign-ins, failed access attempts and abnormal behavior. Cloud tools (Google Workspace Security Center, AWS GuardDuty) automatically detect threats. Configure alerts to be notified in real time.

LCMH supports SMBs in securing their cloud infrastructure and implementing cybersecurity best practices.

For Google Workspace-specific security, read our article on data protection in Google Workspace.

Sources

1. ANSSI, IT Best Practices Guide. ssi.gouv.fr
2. ANSSI, Cyber Threat Overview 2024. cert.ssi.gouv.fr
3. cybermalveillance.gouv.fr, Best Practices. cybermalveillance.gouv.fr