You Don't Have to Protect Everything at Once. Start with What You Can Do.

Protecting Your Work and the Connections That Matter — Part 5

Where should you begin?

So far, we have looked at how our work depends on many people and services, and how a problem somewhere along those connections can affect the work itself.

What should we do about it?

Do you need to hire someone who knows a lot about computers? Do you have to buy expensive security products?

It is understandable if those questions make the subject feel overwhelming.

But you do not need to make everything perfect from the start.

What matters is reviewing the tools and services you already use and improving them step by step, starting with what you can do.

Take a fresh look at the tools you use every day

Think about the computers and smartphones you use for work.

Because you use them every day, it is easy to put off software updates, reuse the same password, or leave old file-sharing settings unchanged.

None of this is unusual. These things can happen gradually while you are busy running your business.

Start by checking a few basic things:

These steps follow the approach of the “Six Basic Information Security Practices” published by Japan’s Information-technology Promotion Agency (IPA) for small and medium-sized businesses and sole proprietors.

You can start without buying special equipment.

Make sure you have another copy of what matters most

There is one item here that deserves a closer look: backups of the data your business needs.

Customer information, order records, accounting data, and documents you have created for work can all be important. Losing them because of a computer failure or an accidental operation could seriously affect your business.

One way to prepare is to keep copies of important data somewhere other than the computer you normally use.

       Work computer
            |
            v
       Important data
            |
        Copy regularly
            |
       +----+-----+
       |          |
       v          v
   External    Another location
   storage     or service
   (stored)    (stored safely)

However, making a copy is not the end of the job.

• Is the data being copied regularly?
• Is the copy protected from being lost along with the original computer?
• Can you actually restore the data when you need it?

These are things worth checking from time to time.

For example, if you use an external storage device, you can disconnect it from the computer and put it away after making a backup. If you use a cloud service, check whether you can restore an earlier version of a file if it is deleted or changed. Simply synchronizing files may not be enough.

The important thing is not just to have a copy, but to make sure you can get your data back when you need it.

Check the services you use from time to time, too

The settings for cloud services and shared folders you use for work should not be treated as something you configure once and then forget.

For example, a file you shared with a business partner may still be accessible after the sharing is no longer needed. An account used by a former staff member may still be active.

From time to time, check things such as:

• Can only people who still need access use the service?
• Are there accounts or sharing settings that are no longer needed?
• Is important information available to people who should not be able to see it?

You do not need to inspect every detail. Start with the information that matters most, such as customer records and business documents.

What would you do if something you rely on became unavailable?

So far, we have focused on protecting the tools and data you use every day.

There is one more thing worth thinking about in advance:

If a service your business depends on became unavailable, what could you use instead?

For example, if your booking service stopped working, could you check reservations by phone? If email became unavailable, would you have another way to contact your business partners?

You do not need a perfect alternative for every situation.

• Keep important contact details somewhere you can access without email.
• Keep the essential information you need to manage your work available in another form, where appropriate.
• Write down the contact details of people or companies you can consult when something goes wrong.

Small preparations like these can be helpful when you need them.

Start with just one thing

Let’s review the steps we have discussed:

1. Keep operating systems and software up to date.
2. Check that antivirus or other device protection is enabled.
3. Review your passwords.
4. Check file-sharing and service access settings.
5. Back up important data.
6. Learn about threats and common attack methods.

You can also prepare by identifying someone to contact and one alternative way to communicate if an important service stops working.

You do not have to finish everything today.

You might check for computer updates today, make a copy of important data another day, and review file-sharing settings when you have time.

That is a perfectly reasonable way to begin.

       Choose one thing
             |
             v
        Try it in practice
             |
             v
        Make it sustainable
             |
             v
        Move on to the next step

Cybersecurity is not something that only people with special technical skills can do. It can begin with a small review of the tools and habits that are already part of your work.

You do not have to protect everything at once. Why not start by protecting one thing that matters to your business?

In the final article, we will look at what to do if something actually goes wrong. We will consider how to seek help without panicking and how to work toward getting your business running again.