For organisations · Cyber security guidance

SME cyber security guide

Focus the limited time and budget of a small business on the measures that build everyday resilience.

Practical guides

Find the guidance you need

Browse by topic or search for the situation you are facing.

3 guides available

Strong security on a small budget

Small and medium enterprises are frequent targets precisely because attackers expect weaker defences, yet most attacks use common, preventable methods. You do not need a large budget or a dedicated team. A handful of well-chosen measures, applied consistently, will protect your business against the attacks you are most likely to face.

The measures that matter most

  • Protect email, banking, mobile-money and administrator accounts with multi-factor authentication.

  • Keep phones, computers and software updated, and replace what is no longer supported.

  • Back up critical records and test that you can restore them.

  • Verify any change to supplier or payment details before paying.

  • Help staff recognise and report suspicious messages without fear of blame.

Protect the money and the data

For most small businesses the greatest risks are payment fraud and the loss of customer data. Treat requests to change bank details with suspicion, protect the accounts that move money, and handle customer information lawfully under the Data Protection Act, 2019. The guides below turn these priorities into simple steps.

Keep it going

Security is not a one-off purchase. Spend a little time each month checking updates, backups and account access, and know who to call, your bank, mobile-money provider and the relevant national authority, if something goes wrong.

Useful references

Here to help

Something doesn’t look right?

Prepare an incident report with the details that matter.

Report an incident