Security for Sole Traders and Micro Businesses
One to five people, no IT department, and every account matters. A scaled-down security plan for sole traders and micro businesses that fits into an afternoon.
Sole traders and micro businesses run on a handful of accounts: email, banking, a website, social media and maybe a booking or invoicing tool. If one is lost, the business stops. The good news is that protecting them takes an afternoon.
An afternoon plan
- List your accounts, and which email and phone number each uses for recovery.
- Turn on two-step verification everywhere, starting with email. See two-step verification.
- Use a password manager with unique passwords. See setting one up.
- Separate business and personal email, wallets and social pages where possible. See business wallets.
- Back up your work files and customer records. See backup strategy.
- Protect your phone: screen lock, updates, SIM PIN. See protecting your phone number.
- Set one payment rule: changes to bank details are always confirmed by phone.
Common threats to small operators
- Fake customers and fake payment alerts. See fake payment alerts.
- Hijacked social pages. See business social media security.
- Invoice fraud. See changed bank details.
Unsure about a message from a "customer"? Paste it into CyberWatch AI Scan.
For more, see our complete guide to small business cybersecurity.
Frequently asked questions
Is a one-person business really a target?
Yes. Scammers target email accounts, payments and social pages regardless of size, and small businesses often have fewer checks.
Should I separate business and personal accounts?
Where you can, yes. It limits the damage if one is compromised and makes records clearer.
What if I use my personal phone for work?
Protect it as a work device: screen lock, updates, two-step verification and backups.
Sources
- Small organisations guide to cyber security, UK National Cyber Security Centre
- Cybersecurity for Small Business, US Federal Trade Commission
- Secure Our World, US Cybersecurity and Infrastructure Security Agency
