Minimum Viable Security for SMB Checklist

System Active

Verify you have necessary permissions.

Schedule time for this activity.

System Active

**MFA Everywhere**: Enable MFA on Email (M365/Google), Banking, and Accounting software.

**Password Manager**: Deploy a corporate password manager (1Password/Bitwarden) and ban password reuse.

**Admin Rights**: Remove local administrator rights from daily user accounts.

**Auto-Update**: Configure OS (Windows/Mac) and Browser (Chrome/Edge) to install updates automatically.

**Next-Gen AV**: Install a reputable EDR/NGAV solution (Defender for Business, CrowdStrike, SentinelOne).

**Firewall**: Enable the built-in OS firewall on all laptops.

**Backups**: Enable automated cloud backup (Backblaze/CrashPlan) for critical files.

**Email Security**: Enable "Preset Security Policies" (Standard/Strict) in M365 or Google Workspace.

System Active

Confirm all items are marked.

Sign off on the log.

01 // EXECUTION_SEQUENCE