31 essential security controls every small business should have in place. No jargon. No fluff. Just a practical list you can hand to your IT person today.
The whole checklist is on this page — print it, share it, hand it to your IT provider. If you want a second opinion on where you landed, leave your email and a person will follow up.
Here's what's covered — preview all 31 items below
of breaches start with an unpatched vulnerability — the most common way in (Verizon DBIR 2026)
of breaches at companies under 1,000 people start with phishing (Verizon DBIR 2026)
median cost to recover from ransomware, excluding any ransom paid (Sophos, 2026)
Most small businesses don't have a security team. This checklist gives you a starting point to identify gaps and take action before an incident happens.
If your checklist has more unchecked boxes than checked ones, we can help. Managed IT covers a lot of this list — 24/7 monitoring, patch management, endpoint protection, email filtering, MFA, firewall management, backups and security awareness training — starting at $150/user/month. Call and we'll tell you which boxes we can check for you and which ones we can't.
Or call us at (919) 446-5484