OK_Computer oklahoma city it
405-252-9691 Book support

Wiki

CISA Cyber Essentials

entity · 1 tags

CISA Cyber Essentials

Summary

The Cybersecurity and Infrastructure Security Agency (CISA) created “Cyber Essentials” as a free, foundational cybersecurity guide for small businesses. It breaks down the most critical protections into four simple categories—everything you need to know to get started securing your business.

What You Need to Do

1. Secure Your Devices

  • Keep all software updated (enable automatic updates)
  • Use the built-in antivirus/malware protection (Windows Defender on Windows, XProtect on Mac)
  • Set strong passwords or biometrics (Face ID, fingerprint) on every device
  • Enable device encryption (FileVault on Mac, BitLocker on Windows)

2. Secure Your Network

  • Change default passwords on all routers, firewalls, and network equipment
  • Set a strong Wi-Fi password (WPA3 or WPA2, never WEP)
  • Segment your network—separate payment processing devices from general office internet
  • Use a firewall (built into your router or OS)

3. Secure Your Data

  • Back up data regularly—at least weekly, stored offline or in a separate account
  • Encrypt sensitive data (customer lists, financial records)
  • Limit access: give employees only the data they need for their job
  • Shred physical documents containing customer information

4. Human Factors (Training & Response)

  • Train staff to recognize phishing emails and suspicious calls
  • Have an incident response plan—know who to call and what steps to take
  • Conduct a 15-minute security check monthly with your team

Take Action Today

  1. Pick one shield to start: Choose the easiest category above and implement those protections this week.
  2. Enable MFA everywhere: Multi-factor authentication is the single most effective protection against account takeover.
  3. Test your backups: Verify you can restore files from backup before you need to—malware can corrupt online backups too.

Sources