You are not sure where to start
Use this when there are too many cyber tasks and you need a practical order.
Small business cyber safety
Small Business Cyber Action Plan Builder
What should my business fix first?
Turn your cyber safety concerns into a simple action plan: first 3 fixes, this week, this month and later. Based on public ASD/ACSC Essential Eight guidance.
Action planFirst 3 fixesThis weekPractical next step
When to use this check
Use this when you want a practical business-owner answer, not a technical framework first.
You have a small budget or limited time
Start with fixes that reduce the biggest business risk first.
You want a simple plan before booking help
Use the result to decide what Your IT & Tech Mates should help with first.
Privacy: this checker runs in your browser and does not ask for sensitive details.
Answer the quick questions
Tick the statements that match your business. You can leave anything blank if you are not sure.
How this relates to the Essential Eight
This action plan builder maps small-business concerns back to Essential Eight basics such as two-step login / MFA, safe backups, software updates, admin access and safer devices.
Helps improve Essential Eight alignment step by step. This is a practical self-check, not a formal government certification or audit.
What this means for a small business
A good cyber plan should not overwhelm the owner. It should show the first few fixes, then what can wait until this week, this month and later.
What to fix first
- Protect email and important accounts with two-step login.
- Check backups and run a test restore.
- Review admin access, old staff access and shared passwords.
Why it matters
Small businesses often delay cyber work because everything sounds urgent. A simple order helps you reduce the biggest risk without trying to fix everything at once.
When to get local help
Need help turning this into real protection? Your IT & Tech Mates can help set up two-step login, backups, updates, admin access, safer devices, and a plain-English cyber action plan for your business.
Related tools
Use the hub and related tools to check the other parts of your small business cyber safety setup.
Cyber Safety Hub
Return to the hub and choose your business concern.
Small Business Cyber Safety Self Check
Start with the full five-minute check across logins, backups, updates, access and device safety.
Email & Login Safety Checker
Check two-step login and account access for email, cloud, accounting, website and social platforms.
Backup Safety Checker
Check whether files, invoices, records and job photos can be recovered if something goes wrong.
Staff Access Risk Checker
Review old accounts, admin access, shared passwords and contractor access.
Out-of-Date Computer Risk Checker
Check whether computers, browsers, Office, accounting apps, POS systems and remote access tools are being kept up to date.
Risky Office Attachment Checker
Check whether risky Office files, invoices, spreadsheets, supplier documents or attachments could put your business at risk.
Safer Browser & App Settings Checker
Check browser updates, extensions, downloads, password saving, PDF readers, remote access apps and common unsafe app settings.
Cyber Insurance & Tender Evidence Helper
Prepare a plain-English evidence checklist for insurers, suppliers, clients or tenders.
Small Business Cyber Action Plan Builder
Turn your answers into a simple action plan: first 3 fixes, this week, this month and later.
Need help turning this into real protection?
Your IT & Tech Mates can help set up two-step login, backups, updates, admin access, safer devices, and a plain-English cyber action plan for your business.
FAQ
What should a small business usually fix first?
Email logins, backups, updates and admin access are usually strong first areas because they protect money, files, staff access and daily operations.
Is this a full Essential Eight compliance plan?
No. This is a plain-English self-check and prioritisation guide based on public ASD/ACSC Essential Eight guidance.
Can Your IT & Tech Mates help with the action plan?
Yes. We can help set up two-step login, backups, updates, admin access cleanup, safer devices and a plain-English cyber action plan.