The Small Business Security Playbook

A practical security framework for the small-business owner who does not have an IT team, and who is tired of being told to "do something about cybersecurity" without anyone explaining what. Four categories cover ninety percent of the risk: who can get in (identity and access management), what they can take (data classification and retention), how you survive when things go wrong (backup and disaster recovery), and how you keep your software from being the way in (vulnerability and patch management).

Written for the consulting-firm owner, the clinic administrator, the e-commerce operator, and the freelance designer. Three running case studies (a 22-person consulting firm, a Shopify-based merchant, and a four-person clinic) show the framework applied in different industries, at different risk profiles, with different budgets. Six tabletop exercises, ten policy templates, a vendor questionnaire, and a sixteen-question maturity assessment are included as ready-to-customise tools.

An imprint of Sylvan Press.