The Current Threat Landscape
- ▸Ransomware-as-a-service has industrialised attacks against SMEs, not just enterprises.
- ▸Business email compromise targets finance teams with convincing invoice fraud.
- ▸Supply-chain compromises reach you through vendors and managed tools you trust.
- ▸Mobile and remote workers expand the attack surface beyond the office firewall.
Essential Technical Controls
- ▸Enforce multi-factor authentication on email, VPN, admin accounts and SaaS.
- ▸Patch operating systems and internet-facing services on a fixed cadence.
- ▸Deploy endpoint detection and response rather than legacy antivirus alone.
- ▸Filter email aggressively and publish SPF, DKIM and DMARC for your domains.
- ▸Keep encrypted, offsite, immutable backups that are tested regularly.
Your People Are the Perimeter
- ▸Run regular phishing simulations with follow-up training, not blame.
- ▸Use onboarding and offboarding checklists so access never lingers.
- ▸Apply least privilege: staff get the access their role requires, nothing more.
- ▸Make it easy and safe to report suspicious messages within minutes.
Prepare for the Worst Before It Happens
- ▸Write an incident response plan with named roles and contact trees.
- ▸Rehearse with tabletop exercises covering ransomware and data breach scenarios.
- ▸Align cyber insurance requirements with your actual controls.
- ▸Understand POPIA breach notification duties to the Regulator and data subjects.
Download the Cybersecurity Essentials Checklist
Enter your details and we'll email you the full checklist PDF — free, no strings attached.