Some of buzz words you will hear is called Zero trust network. Here are some practical steps you can implement for your business.

1. Use password manager to manage passwords

2. Regularly update your operating system, software, and firmware to ensure that security patches are applied, and vulnerabilities are addressed.

3. Install and regularly update anti-virus and anti-malware software to protect against malicious software. Don’t rely on Defender or Mac OS is secure by design.

4. Enable two-factor authentication for all accounts that support it. This adds an extra layer of security by requiring a second form of verification, such as a text message or fingerprint scan.

5. Use a VPN when accessing the internet from public networks or when traveling. A VPN encrypts your internet traffic, making it more difficult for hackers to intercept.

6. Restrict access to sensitive information only to those who need it, and monitor access closely.

7. Provide Cyber Security Awareness training for the staff for best practices, such as how to identify and avoid phishing scams, and how to secure their devices and accounts.

8. Regularly audit your network security to identify vulnerabilities and ensure that all security measures are up to date.

The best way to backup and protect is not to have to manually plug something to do it. Today we have cloud storage in Canada and US that comply with data privacy rules that can be used to backup files or mirror images of the whole enchilada aka your computer.

If you have emails in Microsoft 365, Microsoft InTune is a good solution. Google has its competitive solution as well. The key is someone has to monitor the reports and take actions or set alerts so appropriate staff are notified if and when suspicious activities happen.

You have many options here. The key is not lock yourself to one provider for long term without Exit clause. Make the investment for the contract to be in your favour. The majority of the tools do the same tasks