Growing SME
Staff and suppliers widen the ground you have to hold - more inboxes to fool, more logins to steal, more third parties who can be breached in your name. You probably have no dedicated IT or security person yet, so at this size consistency matters far more than cleverness: the basics, done the same way by everyone.
Your priorities, in order
Ransomware
CriticalYour files locked and scrambled until you pay - perhaps.
Running a website or small orgSee what to doBusiness email compromise (BEC)
CriticalA criminal poses as your boss or a supplier to have money sent to them.
Scams & deceptionSee what to doCredential stuffing
HighStolen password lists tried automatically against your logins.
Protecting your accountsSee what to doThird-party / vendor breach
HighYour data exposed because a supplier was breached.
Running a website or small orgSee what to doSupply-chain attacks
CriticalA trusted supplier or code library is compromised - and so are you.
Running a website or small orgSee what to doTwo-step fatigue (prompt bombing)
HighBeing flooded with approval prompts until you tap βyesβ.
Protecting your accountsSee what to doInsider threat
HighHarm from someone on the inside - careless or deliberate.
Running a website or small orgSee what to doShadow IT
MediumStaff using apps and services no one has checked or approved.
Running a website or small orgSee what to doUnpatched software & zero-days
CriticalKnown holes left unfixed - the attackerβs preferred shortcut.
Running a website or small orgSee what to doBroken access control
CriticalPeople reaching data or actions they should never be allowed.
Running a website or small orgSee what to do