Most small-business breaches start with a single stolen password. A handful of settings close that door: multi-factor sign-in for everyone, a proper home for shared passwords, access removed for people who have left, and admin rights kept to the accounts that need them.
What’s included
- Multi-factor authentication turned on for every account, with each person walked through setup
- A password manager for shared logins, replacing texts and sticky notes
- Former staff removed from email, cloud storage and business apps
- Admin rights taken off everyday accounts, with separate admin accounts where they’re needed
- A short record of what was changed and who holds which access