1. Protect logins
Turn on two-step login for email, accounting, banking, website admin and social media accounts.
Small business cyber safety
Small Business Cyber Safety Tools — Based on the Essential Eight
Check your business cyber security step by step. Get simple guidance for two-step login, updates, backups, admin access, email safety, risky files, and safer devices — without the jargon.
Based on public ASD/ACSC Essential Eight guidance. Built for Australian small business owners who want a clear next step, not a thick policy document.
Plain EnglishBusiness-owner firstPractical self-checkLocal help available
Small business cyber security does not need to start with a thick policy document.
Start with the basics that protect your money, files, customer records, email accounts, and staff devices. These tools help you check those basics and decide what to fix first.
What are you worried about today?
Choose the concern that sounds closest to your business. Start with the main self-check, or choose a focused check for email logins, backups, staff access, updates, risky Office files, safer browser and app settings, insurance evidence or an action plan.
#1 Start hereSmall Business Cyber Safety Self Check
Answer simple questions about logins, backups, updates, staff access and email safety. Get your safest next step in plain English.
Email and loginsCould someone get into your business accounts?Check whether important accounts like Microsoft 365, Google, Xero, banking, website and social media have extra login protection.
Files and recoveryIf something goes wrong, can your business recover?Check whether your files, invoices, job photos and customer records are backed up safely enough.
Staff accessDo staff have more access than they need?Check admin access, old staff accounts, shared passwords, website access, social media access and accounting access.
Device updatesAre old computers or apps putting your business at risk?Check whether computers, browsers, Office, accounting apps and remote access tools are being kept up to date.
Risky filesCould a document or spreadsheet trick your staff?Check whether risky Office files, invoices or attachments could put your business at risk.
Browsers and appsAre browsers and apps set up safely enough?Check browser updates, extensions, downloads, password saving and common unsafe app settings.
Insurance and tendersNeed to answer cyber security questions?Prepare a plain-English evidence checklist for two-step login, backups, updates, admin access, device safety and user access.
Action planNot sure what to fix first?Turn your answers into a simple cyber action plan: first 3 fixes, this week, this month and later.
Supporting guides for small business owners
Read the plain-English guide that matches your current question, then use the related free tool to check your business.
Essential Eight Explained for Small Business OwnersEssential Eight Explained for Small Business Owners
A plain-English explanation of the Essential Eight for Australian small business owners, focused on email, money, files, devices, staff access, recovery and cyber insurance questions.
How Safe Is My Small Business Email Account?How Safe Is My Small Business Email Account?Learn how small business email accounts get misused for fake invoices, account takeover and password problems, and what to check first in plain English.
What Cyber Security Should a Small Business Fix First?What Cyber Security Should a Small Business Fix First?A practical first-fix cyber safety guide for Australian small businesses: email protection, backups, updates, admin access and staff account cleanup.
Can My Business Recover If Files Are Locked or Deleted?Can My Business Recover If Files Are Locked or Deleted?Plain-English backup and recovery guidance for small businesses using OneDrive, Google Drive, servers, NAS, accounting files, invoices and job records.
Why Staff Should Not Use Admin Accounts Every DayWhy Staff Should Not Use Admin Accounts Every DayA small-business explanation of admin access, why daily admin use increases damage, and how to review staff access safely.
What to Check Before Answering Cyber Insurance QuestionsWhat to Check Before Answering Cyber Insurance QuestionsA plain-English guide to checking MFA, backups, updates, device lists, user lists, admin access and basic cyber process before insurance or tender questions.
Do Small Businesses Need MFA on Microsoft 365?Do Small Businesses Need MFA on Microsoft 365?Plain-English Microsoft 365 two-step login guidance for small businesses, including safe rollout, staff lockout concerns, admin accounts and shared mailboxes.
Are Automatic Updates Enough for Small Business Cyber Security?Are Automatic Updates Enough for Small Business Cyber Security?Understand what automatic updates do and do not cover for Windows, macOS, browsers, Office, PDF tools, accounting apps, POS and remote access tools.
How to Check If Your Business Backups Actually WorkHow to Check If Your Business Backups Actually WorkA simple Australian small business guide to restore testing, backup location, backup frequency, ransomware-safe copies and who knows how to recover files.
Simple Cyber Security Checklist for Australian Small BusinessSimple Cyber Security Checklist for Australian Small BusinessA practical cyber security checklist for Australian small business owners covering email, backups, updates, admin access, risky files, browsers, evidence and action planning.
How this relates to the Essential Eight
The official Essential Eight uses technical control names. This hub keeps the business-owner wording first, then maps it back to the public guidance.
- Two-step login
relates to multi-factor authentication. - Software updates
relate to patching applications and operating systems. - Admin access
relates to restricting administrative privileges. - Safe backups
relate to regular backups and recovery. - Risky Office files
relate to Microsoft Office macro controls. - Safer browsers and apps
relate to user application hardening and application control.
This is a practical self-check, not a formal government certification or audit.
What to fix first if you are busy
Most small businesses do not need to fix everything in one day. Start with the items that reduce the biggest everyday risk.
2. Check backups
Make sure important files can be restored and that ransomware cannot easily reach every backup copy.
3. Update devices
Keep computers, browsers, Office, accounting apps and remote access tools updated.
4. Reduce admin access
Staff should not use admin accounts for everyday work unless there is a clear reason.
5. Clean up old access
Remove old staff, old contractors, shared passwords and unused admin accounts.
6. Get help if unsure
A short local review can turn confusing cyber questions into a clear action plan.
When to get local help
Need help turning this into real protection? Your IT & Tech Mates can help set up two-step login, backups, updates, admin access, safer devices, and a plain-English cyber action plan for your business.
Get help when a cyber question affects money, customer records, staff access, insurance, tenders, NDIS-style supplier checks, or business continuity.
You need two-step login set up safely
We can help protect accounts without locking staff out or losing access to shared mailboxes.
You are not sure backups work
We can help check what is backed up, what is missing, and whether recovery has been tested.
You need a plain-English action plan
We can review logins, updates, admin access and common device risks, then explain what to fix first.
Related helpful areas
Cyber safety often overlaps with scam safety, email safety and everyday business IT support.
FAQ
Is this an official Essential Eight audit?
No. These are practical plain-English self-checks based on public ASD/ACSC Essential Eight guidance. They are not a formal government certification or audit.
Can this guarantee my business is safe?
No tool can guarantee safety. The goal is to help you find obvious gaps, reduce risk and choose the next practical fix.
Do I need to understand cyber terms?
No. The tools use small business language first, then explain how the answer relates to the Essential Eight.