Wheeler Wolfenden and Dwares logo
A printed document sits on a desk beside a pen. The document displays the question, "Cybersecurity Training: Do you need it?" with a checkbox marked "Yes" and an unchecked box next to "No." The image emphasizes the importance of training employees to recognize cyber threats, follow security policies, and protect sensitive business information. The visual supports the concept that workforce education is a key component of a strong cybersecurity strategy.

How to Better Protect Business Data

According to recent industry data, nearly half of all small businesses fall victim to cyberattacks every year. This means that an event occurs every seven seconds, costing businesses on average more than $250,000. Six months after an attack, 60% of all businesses will close shop.

You can and must take measures to strengthen your small business’s cybersecurity. Implementing multifactor authentication on all accounts, enforcing strong passwords, automating software updates and regularly backing up sensitive data are a few of the steps necessary to prioritize your company’s protection. The following core practices are actions you can take to protect your business now.

The key actions

A person holds a smartphone while interacting with a digital login interface displayed over the image. Visible security elements include a username field, password field, lock icon, numeric keypad, fingerprint authentication symbol, and a notification labeled "2FA" representing two-factor authentication. A keyboard and computer workstation are visible in the foreground. The image illustrates cybersecurity best practices, including multifactor authentication, secure account access, identity verification, and protection against unauthorized access to business systems and sensitive data.
  • With direct access to your digital systems, you need to train employees to use the internet securely. Require that employees employ strong passwords and change them every three months. Establish rules for handling and protecting customer information and other crucial data. Never allow employees to download any software without the explicit consent of the organization. Additionally, make employees aware of the consequences of violating any company cybersecurity policy.
  • Keep computers armed with the latest security software, web browsers and operating systems to ward off viruses, malware and other online threats.Set antivirus software to run scans after each update. As soon as they become available, install other key software updates.
  • When laptops are unattended, store them in a secure space. Thieves can easily steal them, and employees can easily lose them. Give each employee a separate account, and leave administrative responsibilities in the hands of trusted IT personnel.
  • Set firewall security for your internet connection to make it difficult for outsiders to breach your data. Free firewall software is available online so that you can install it on your company’s system. For employees working remotely, make sure that their home system is also protected by a firewall.
  • Make it a practice to regularly back up copies of essential data on all computers. Such data includes word processing documents, electronic spreadsheets, databases, financial files, human resources files and accounts receivable/payable files. Back up data automatically at least weekly. Store copies either off-site or in the cloud.
  • Secure your Wi-Fi system by making sure it is encrypted, secure and concealed. To conceal your system, set up your wireless access point or router so that it does not transmit the network name, known as the service set identifier. Access to the router needs to be password-protected as well.
  • Utilizing MFA is another important security measure. MFA verifies a user’s identity by providing more than a password or a username alone. Some familiar MFA methods are fingerprint, facial recognition or PIN.

Even when you are implementing preventive measures against cyberattacks, cybercriminals are also evolving. Malware, phishing, viruses, ransomware and spyware are some of the better-known tools cybercriminals have in their toolbox. Small-business owners need to be vigilant in assessing the threat to their data and systems. If necessary, hire a qualified professional to help assess the risk level and create a plan of action.

© 2026 All rights reserved.

We welcome the opportunity to put our tax expertise to work for you. To learn more about how our firm can help advance your success, don’t hesitate to contact Kathy Corcoran at (302) 254-8240.