You don't need to be a large corporation to take cybersecurity seriously. This practical checklist covers the fundamentals every Perth small business should have in place - without the enterprise price tag.
Know someone who needs this checklist?
Forward it to whoever handles IT, admin, or operations on your team.
Access & Identity
- Multi-factor authentication (MFA) enabled on all accounts
- Strong unique passwords via a password manager
- Admin accounts separate from daily-use accounts
- Offboarding process to remove access when staff leave
Devices & Software
- All devices running up-to-date operating systems
- Antivirus / EDR software on all endpoints
- Automatic patching enabled for all software
- Screen lock after 5 minutes of inactivity
Email & Phishing
- Email filtering / anti-spam in place
- Staff can identify phishing emails (training done in last 12 months)
- Email impersonation protection (DMARC/DKIM/SPF configured)
- Suspicious email reporting process in place
Backup & Recovery
- Automated daily backups running
- Backups stored offsite or in the cloud
- Backups tested with a real restore in the last 6 months
- Disaster recovery plan documented
Network
- Firewall configured and up to date
- Guest Wi-Fi separate from business Wi-Fi
- VPN required for remote access to business systems
- Unused ports and services disabled
Frequently Asked Questions
Do small businesses really need all of this, or just the basics?
Every item on this checklist is a genuine fundamental, not an enterprise extra, and most are inexpensive or already included in modern software. Trying to pick and choose leaves gaps that attackers specifically look for, since they don't discriminate by business size.
What's the single highest-priority item on this checklist?
Multi-factor authentication on all accounts, since it's one of the cheapest controls to implement and blocks the majority of account compromise attempts even when a password is stolen. If nothing else on this list gets done this month, this is the one to prioritise.
How do we know if our backups actually meet the checklist requirements?
Check three things, are backups running automatically, are they stored somewhere offsite or in the cloud, and has a real restore been tested in the last six months. A backup that's never been restored is really just an assumption that it works.
How often should this checklist be reviewed?
At least annually, though a lot of Perth businesses find it useful to revisit it every time they add new staff, systems, or software. Security postures drift over time as new tools get added without the same controls applied from day one.
Every item on this checklist is included as standard in our managed cybersecurity services for Perth businesses.
Cybersecurity Services →Not Sure Where to Start?
Top Tier Computing offers a free IT health check for Perth businesses that includes a security and vulnerability review. We'll work through this checklist with you, identify your gaps, and give you practical recommendations - at no cost and no obligation.
Book your free security assessment
Our Perth team will review your current security posture and give you a clear action plan.
For related reading, see our guides to How AI Is Changing Cybersecurity for Perth Businesses and Getting Cybersecurity Budget Approved by Your Board or Owners.