Online safety for small business
You don’t need an IT department. You need six basics done well, a phone-call verification habit, and a one-page plan for the bad day. All here, all free.
Three things worth knowing first
- Verify every bank-detail change by phone on a number you already had. Zero exceptions.
- MFA on email first — business email compromise is the costliest small-business attack.
- A no-blame reporting culture is a security control. Say it out loud to your team.
- guideSmall business: the 6-step cyber hygiene baselineThe six cyber security steps every Australian small business should take this week: updates, backups, MFA, staff awareness, payment verification, and a response plan. Plain English, no jargon.7 min read · Reviewed October 2026
- guideInvoice and payment redirection fraudPayment redirection is the costliest scam for Australian small business: fake “new bank details” emails from hijacked or spoofed supplier accounts. The phone-call rule that stops it.4 min read · Reviewed October 2026
- guideBusiness email account takeoverYour business email is the keys to your kingdom — invoices, banking resets, customer trust. How takeovers happen, how to spot one, and the hour-by-hour response for Australian small business.5 min read · Reviewed October 2026
- guideStaff cyber awareness training kitA 15-minute quarterly cyber awareness session you can run yourself: the three messages that matter, a quick phishing quiz, and a printable one-page policy for your team.4 min read · Reviewed October 2026
- guidePassphrases, password managers and 2FAThe 15-minute guide to un-hackable accounts: why passphrases beat passwords, how to set up a password manager, and which two-factor authentication to use in Australia.8 min read · Reviewed October 2026
- guideWhat to do after a data breachYour details were in a data breach — now what? Plain-English Australian guide: which details matter, who to contact, credit bans, IDCARE help, and your rights under privacy law.7 min read · Reviewed October 2026
- playbookMy account or device has been hackedRegain control of a hacked email, social media or device: secure your email first, reset passwords, turn on 2FA, check for damage, and report to ReportCyber. Plain-English steps.6 min read · Reviewed October 2026