Cyber hygiene

The routine, everyday practices that keep systems and data healthy and secure, such as updating software, using strong authentication and keeping reliable backups.

Like personal hygiene, cyber hygiene is about consistent habits rather than one-time fixes. Core practices include installing updates promptly, using unique passwords and multi-factor authentication, removing unused accounts and software, backing up data and training staff to recognize scams.

Most successful attacks on small businesses do not involve sophisticated techniques. They exploit missing updates, weak or reused passwords, or a convincing email. Good cyber hygiene closes many of these gaps at relatively low cost. It is also what cyber insurers, larger clients and frameworks like the CIS Controls look for first.

Practical tip: turn hygiene into a schedule. For example, check monthly that updates are applying and backups are succeeding, review user accounts quarterly, and run a short staff awareness refresher at least once a year. A simple checklist your IT provider reports against each month makes it easy to see whether the basics are actually being done.