Ransomware Protection for Small Business
Ransomware locks your files and demands money. For a small office that can mean no billing, no client records and no schedule until you recover. The good news is the best protection is boring and cheap.
Here is what matters, in order. The kit below puts the backup, incident response and phishing policies on paper.
Six steps that stop most ransomware trouble
- Backups first. Keep a copy offline or separate from your network, so ransomware cannot reach it. Test a restore. A backup you never tested is a guess.
- MFA on email and remote access. Stolen passwords are a common way in.
- Patch fast. Install critical updates quickly and retire anything the maker no longer supports.
- Endpoint protection. Run it on every computer, and make sure someone looks at the alerts.
- Train your staff. Phishing emails carry a lot of ransomware. A short session a few times a year helps.
- Limit admin rights. If a user is tricked, the damage should stop at what that user can reach.
No single tool does it all. Layers matter, and backups matter most.
What to do in the first hour
Decide this before it happens. Write down who to call and in what order.
- Disconnect the affected computers from the network. Do not turn off power until you have been told what to do.
- Call your cyber insurance broker or the claims line on your policy. Many policies have steps you must follow.
- Call your attorney if client or patient data may be involved.
- Do not delete anything, and do not wipe machines until you know what you have.
The Starter Kit includes an Incident First Hour Checklist and an Incident Response policy you can fill in today.
Backups and insurance go together
Insurers ask about offline backups, restore tests, MFA and endpoint protection on every application. If you carry cyber insurance, the same steps help you answer the questionnaire. See cyber insurance renewal questionnaire help.
Want me to check your real setup? The Cyber Insurance Readiness Check is a remote review with a fixed price by seat count. Ask for a quote at lonestarcomputersecurity.com. Or start with the small business cybersecurity checklist and the Microsoft 365 security setup list.
Watch the 30 second overview
Two ways to get ready: do it yourself with the kit, or have me check your setup.
Frequently asked questions
How can a small business protect itself from ransomware?
Keep tested backups that ransomware cannot reach, turn on MFA for email and remote access, patch quickly, run endpoint protection, train staff and limit admin rights.
Does antivirus stop ransomware?
It helps, but it is not enough alone. Attackers get in through stolen passwords, missed updates and phishing. You need layers, and a backup you have tested.
Are my cloud files safe from ransomware?
Not always. Sync tools can copy encrypted files to the cloud. Keep a separate backup with version history so you can go back to a clean copy.
Should I pay the ransom?
That is a decision for you, your attorney and your insurer. Paying does not guarantee you get your files back, which is why tested backups matter so much.
What if I am hit right now?
Disconnect the affected computers and call your insurance broker or claims line first. After the emergency, I can help you build a plan so it does not happen again. I work remotely.
Start Today With a Security Readiness Kit
Prefer to work at your own pace? Our editable Word templates put your policies and checklists on paper in plain English. Every tier includes an explainer video.
Starter Kit
Ten ready to customize security policies and four checklists, as editable Word templates in plain English.
Buy the Starter KitProfessional Kit
Everything in Starter, plus a cyber insurance readiness checklist pack and a 30 day implementation guide.
Buy the Professional KitComplete Kit
The full kit, plus HIPAA and WISP template add on packs and IRS references for tax preparers.
Buy the Complete KitSee every document in each tier in the full Security Kit details.
Templates only, not legal advice. Digital download. All sales are final, no refunds.
Talk to Scott
Call 469-248-5463. Remote service for DFW, Texas and anywhere in the US. Scott has 28 years in IT and holds CompTIA Security+ CE.