Security Resources

Playbooks and warning signs

Security guidance for small and mid-size businesses. What to watch for, how to respond, and when to call for help.

Under attack right now?

If you're dealing with an active incident, skip the reading and get help immediately.

Playbooks

Ransomware response playbook

What to do in the first hour, first day, and first week after discovering ransomware.

Coming soon

Phishing incident response

Steps to take when an employee clicks a suspicious link or enters credentials.

Coming soon

Business email compromise response

What to do when someone impersonates your CEO or hijacks an email thread.

Coming soon

Data breach response

Notification requirements, containment steps, and recovery procedures.

Coming soon

Unusual login locations

Logins from countries where you don't have employees. Check your Microsoft 365 or Google Workspace logs.

Email rule changes

Auto-forwarding rules you didn't create. Attackers use these to intercept invoices and payment requests.

Unexpected MFA prompts

If you're getting MFA notifications you didn't request, someone has your password.

Slow or locked machines

Could be ransomware encrypting files. Disconnect from the network immediately.

Vendor payment changes

Any request to change bank details should be verified by phone using a known number.

HIPAA security checklist

Key technical safeguards for healthcare organizations.

Coming soon

SOC 2 readiness overview

What SOC 2 requires and how to prepare for an audit.

Coming soon

PCI-DSS basics

Minimum requirements for handling payment card data.

Coming soon

These resources are a starting point. For security assessments, incident response, or compliance preparation, we can help.