Small-business security guide
If your team lost access to email, files, or a critical application tomorrow, could you keep working? Use this guide to find the gaps that matter most, then make a plan to close them.
See the prevention checklist Talk through your risk with VST
Ransomware can lock files and interrupt the systems your staff uses to serve customers. Some attackers also steal data and threaten to release it. For a small office, a failed restore or an inaccessible cloud account can be as disruptive as an encrypted server.
There is no single product that makes a business ransomware-proof. The useful question is whether you can reduce the ways an attacker gets in and recover the work that matters if something goes wrong. CISA’s ransomware guide covers both prevention and response.
Assign a person and a date to each open item. A checklist only helps when someone follows through.
Start with email, Microsoft 365, remote access, and administrator accounts. Turn on multi-factor authentication (MFA), remove accounts that no longer belong to an employee, and limit admin access to the people who need it.
Know which computers, servers, firewalls, and applications are in use. Assign someone to install security updates and follow up when a device misses them. Unsupported systems need a replacement plan, not a permanent exception.
Use endpoint security and review alerts on the devices you depend on. Train staff to report unusual sign-in prompts, unexpected attachments, and access they did not request. An alert only helps if someone owns the follow-up.
List the systems that would stop your work: files, email, accounting, practice software, or a server. Confirm each one has the right backup coverage. Keep a copy that a compromised account cannot simply delete, then test restoring real files and an important application.
Decide ahead of time who contacts IT, leadership, your insurer, and legal counsel if you suspect an attack. Keep those contacts somewhere available when email or your network is down. Practice the first few decisions with your team.
These starting points align with CISA’s small-business guidance and its #StopRansomware guide. Priorities depend on your systems and the risks you face.
If you suspect an active attack, contact your existing IT or incident-response team right away. If it is safe to do so, disconnect affected devices from the network to help limit spread. Record what you saw and when; avoid wiping or rebuilding systems before responders decide what evidence is needed.
Your response team may need to coordinate with leadership, your insurer, legal counsel, and the appropriate authorities. CISA’s response checklist is a deeper reference. This page and the consultation form below are not an emergency-response service.
Virtual Support Teks works with small and medium-sized businesses in Cleveland and across Northeast Ohio. We can discuss your current access controls, patching, endpoint security, and backup coverage, then scope a security and IT support plan around what you use. Recovery work and on-site coverage depend on the agreement you choose.
Backups are part of recovery, not a substitute for access controls, updates, and detection. Check what is covered, whether an attacker could delete the copies, and whether you can restore the systems your team actually needs.
No single tool can guarantee prevention. Endpoint protection can help detect threats, but stolen credentials, unpatched software, and weak recovery plans still leave gaps.
Use your existing IT or incident-response contact immediately. If you can do so safely, isolate affected devices from the network and preserve evidence; do not wipe devices before your response team assesses them. This consultation form is for planning, not emergency dispatch.
Further reading: CISA #StopRansomware Guide and CISA Secure Your Business. These are third-party guidance, not endorsements of VST.
Tell us a little about your business. We’ll review your setup, point out risks, and show you what better IT support looks like. No pressure and no long sales call.
Prefer to talk? Call 440-678-8357.