The unglamorous parts that matter
We put in endpoint protection, watch for the obvious badness, and make sure there is a backup you can actually restore. Not a slide deck. Not a binder that says “cyber.” The controls that still work when someone clicks the invoice that is not an invoice.
- Endpoint protection and threat monitoring
- Backups you can restore — tested, not theoretical
- Firewalls and access that match how the business actually works
- A human to call when the banner says “your files have been encrypted” and the room gets quiet
Remote staff, same standard
The laptop on the kitchen table is on the same internet as everyone else. We treat home and hybrid machines as part of the environment, not as a weekend exception. Distance from our Woodland office is not the point. Whether the machine is patched, backed up, and allowed to talk only to what it should — that is the point.
If you have rules to follow
Clinics, dentists, and anyone touching patient data should start with HIPAA. Auto dealers, accountants, and anyone holding customer financial information should look at the FTC Safeguards Rule. Security and compliance are cousins. We will not pretend they are the same form.