Skip to content

Small Business Security Fix List

12-point Small Business Cyber Checklist.

A plain-English starting point for owners who want to review website, email, account access, backups, and provider ownership before small issues become harder to untangle.

1

Confirm your website uses HTTPS.

2

Make sure your domain has SPF.

3

Make sure your domain has DKIM.

4

Make sure your domain has DMARC.

5

Use multi-factor authentication on business email.

6

Remove old users from Google Workspace or Microsoft 365.

7

Review who has admin access to your website.

8

Keep your website platform, plugins, and forms updated.

9

Use a password manager for shared business tools.

10

Back up important business files.

11

Know who manages your domain, DNS, and email settings.

12

Keep a simple incident contact list for your web, email, IT, and business owner contacts.

Want a public-facing check?

The checklist helps you organize the basics. The Free Domain Risk Check reviews public website, domain, email authentication, TLS, and security-header signals for a clearer first look.

Run a Free Domain Risk Check

This checklist is educational and practical. It is not a guarantee of security, legal advice, or a compliance certification.