Free small-business guide

Cyber Security Basics: 10 practical lessons.

A plain-English learning path for business owners and managers. Understand the risks, prioritise basic controls and create an action plan without getting lost in technical jargon.

Choose a lesson.

Each guide includes practical advice, examples and a next action for your business.

Lesson 1 of 10

What Is Cyber Security? A Beginner’s Guide for Small Businesses

A plain-English introduction to cyber security, the risks small businesses face and the core controls that reduce the chance and impact of an attack.

Read lesson →
Lesson 2 of 10

Passwords, Password Managers, Passkeys and MFA for Small Businesses

How to reduce account takeover risk with unique passwords, password managers, passkeys and multi-factor authentication.

Read lesson →
Lesson 3 of 10

Phishing Emails: How Small Businesses Can Spot and Stop Scams

A practical phishing guide covering fake login pages, supplier impersonation, payment fraud, suspicious links and staff reporting.

Read lesson →
Lesson 4 of 10

Why Software Updates and Patch Management Matter for Small Businesses

Why supported software and regular security updates are fundamental cyber security controls for business devices, applications and network equipment.

Read lesson →
Lesson 5 of 10

Antivirus, EDR and Firewalls Explained for Small Businesses

Understand the role of antivirus, endpoint detection and response, managed monitoring and firewalls in a layered business security strategy.

Read lesson →
Lesson 6 of 10

Backups, Ransomware and Recovery: A Small Business Guide

A practical guide to business backups, ransomware resilience, restore testing, recovery time and protecting backup administration.

Read lesson →
Lesson 7 of 10

User Access, Administrator Accounts and Least Privilege Explained

How to control who can access business systems, reduce administrator risk and remove unnecessary access when employees or suppliers leave.

Read lesson →
Lesson 8 of 10

Microsoft 365, Email and Cloud Security Basics for Small Businesses

The essential controls small businesses should use to protect Microsoft 365, email and other cloud services from account takeover and impersonation.

Read lesson →
Lesson 9 of 10

Cyber Incident Response: What a Small Business Should Do First

How small businesses can prepare for cyber incidents, report problems quickly, contain damage and maintain a clear decision log.

Read lesson →
Lesson 10 of 10

A 30-Day Cyber Security Action Plan for Small Businesses

A practical four-week improvement plan that turns the mini-course into measurable cyber security actions for a small business.

Read lesson →

Prefer to work through this with a trainer?

39Security runs practical full-day cyber security training with real-world exercises, lunch and an action plan for your business.

See training dates