Ransomware Protection for Small Business: A Practical Checklist

Ransomware does not discriminate by company size — if anything, small businesses are targeted precisely because their defences are thinner. The good news is that the measures that stop the vast majority of attacks are affordable and well understood. Here is a practical checklist you can act on.

The essentials, in priority order

1. Tested, offline backups. Your single most important defence. If you can restore, ransomware becomes an inconvenience, not a catastrophe. Keep one backup copy offline or immutable so it cannot be encrypted too.
2. Keep everything patched. Most attacks exploit known vulnerabilities that already have fixes. Automatic updates on operating systems, browsers and plugins close the easy doors.
3. Email and spam filtering. The majority of ransomware arrives by email. Good filtering strips malicious attachments and links before they reach an inbox.
4. Endpoint protection. Modern managed antivirus detects and isolates threats on every device.
5. Multi-factor authentication. MFA stops stolen passwords from becoming account takeovers.
6. Staff awareness. A trained team that hesitates before clicking is a genuine layer of defence.

Backups let you recover. Everything else buys you the chance to never need to.

Have a plan before you need one

Know in advance who to call, how to isolate an infected machine, and how to restore. A little preparation turns a crisis into a procedure. ERANEXT bundles backups, patching, spam filtering, endpoint protection and awareness training — and provides 24/7 security operations through DANDESK — so ransomware protection is handled, not hoped for.