Quarterly Security Refresh Checklist for Small Businesses

The end of a quarter is a natural moment to check your defenses, and it matters most before the busy holiday season when phishing and fraud increase and staff are distracted. Use this checklist, whether you handle it yourself or have a managed provider do it.

1. Review your security posture

Look for unpatched systems, accounts nobody uses, weak access controls and settings that drifted over the year. A security assessment or penetration test can help if you handle sensitive data.

2. Update your defenses

Confirm that your firewall, router and switches run current firmware, that admin passwords are strong and unique, and that operating systems and applications are patched. Do not forget network storage, cameras and other connected devices.

3. Test your backups

Do a test restore, not just a status check. Follow the 3-2-1 idea: three copies of your data, on two kinds of storage, with one copy off site and separate from your main network.

4. Passwords and multi-factor authentication

Use a password manager and turn on MFA for email, remote access, banking and cloud apps.

5. Train your team

Review how to spot fake emails, urgent payment requests and unexpected attachments. Simulated phishing messages followed by coaching are an effective way to practice.

Make it a routine

These steps work best on a calendar. In a managed plan they are done on a schedule and you receive reporting, so nothing waits for someone to find the time.

Related reading

• managed cybersecurity for Portland businesses
• backup, disaster recovery and business continuity
• Q4 IT readiness guide

Talk to a local team

PDX Information Technology Services provides managed IT, cybersecurity and compliance support for small businesses in Portland, Lake Oswego, Beaverton, Hillsboro and Vancouver, WA. Plans start at $100 per user per month (Gold) and $180 per user per month (Platinum). Call 971-331-4871 or book a free assessment.