10 Security Checkups Every Small Business Should Do at the Start of the New Year
The new year is the perfect time for small businesses to reset priorities—and cybersecurity should be at the top of the list. Cyberattacks increasingly target small and mid-sized businesses because attackers know defenses are often weaker and resources are limited.
The good news? You don’t need an enterprise-level security team to significantly reduce your risk. By performing a few focused security checkups each year, business owners and employees can prevent the most common causes of data breaches, ransomware, and downtime.
Here are 10 essential security checkups every small business should complete at the start of the new year.
1. Review User Accounts and Access Permissions
Over time, businesses accumulate old logins, former employees and unused accounts.
Checkup actions:
- Disable accounts for former employees and vendors
- Confirm employees only have access they actually need
- Remove shared or generic logins
Why it matters: Excess access is one of the leading causes of internal and external breaches.
2. Enforce Strong Passwords and Multi-Factor Authentication (MFA)
Passwords alone are no longer enough.
Checkup actions:
- Require long, unique passwords
- Enable MFA on email, VPNs, cloud apps and admin accounts
- Ban password reuse across systems
Why it matters: MFA blocks the majority of credential-based attacks.
3. Confirm Backup Systems Are Working (and Tested)
Many businesses think they have backups—until they need them.
Checkup actions:
- Verify backups run daily
- Test restoring files and systems
- Ensure backups are stored offline or off-site
Why it matters: Backups are your last line of defense against ransomware.
4. Apply Operating System and Software Updates
Unpatched systems are easy targets.
Checkup actions:
- Install all OS and application updates
- Remove unsupported or end-of-life software
- Enable automatic updates where possible
Why it matters: Most attacks exploit known vulnerabilities with available patches.
5. Review Email Security and Phishing Protections
Email remains the #1 entry point for cyberattacks.
Checkup actions:
- Enable spam and phishing filtering
- Run a short phishing awareness reminder for staff
- Confirm employees know how to report suspicious emails
Why it matters: One click can compromise an entire business.
6. Check Antivirus and Endpoint Protection Coverage
Not all devices are always protected.
Checkup actions:
- Verify antivirus is installed and up to date
- Confirm laptops, desktops, and remote devices are covered
- Enable real-time protection
Why it matters: Endpoint protection stops malware before it spreads.
7. Secure Remote Work and Mobile Devices
Remote work increases flexibility—but also risk.
Checkup actions:
- Require device passwords and screen locks
- Enable remote wipe on laptops and phones
- Use a secure VPN for remote access
Why it matters: Lost or stolen devices are a major data exposure risk.
8. Review Firewall and Network Security Settings
Your firewall is the gatekeeper to your business.
Checkup actions:
- Close unused ports and services
- Review firewall rules and VPN access
- Ensure guest Wi-Fi is separated from business systems
Why it matters: Misconfigured networks are easy targets for attackers.
9. Validate Cloud App and Third-Party Access
Cloud tools are convenient—but often overlooked.
Checkup actions:
- Review connected apps and integrations
- Remove unused or unapproved tools
- Confirm vendors meet basic security standards
Why it matters: Third-party breaches can impact your business even if you’re careful.
10. Update Your Incident Response Plan
Knowing what to do matters as much as prevention.
Checkup actions:
- Define who to contact during a security incident
- Document steps for ransomware or data loss
- Ensure leadership and key staff know the plan
Why it matters: Fast response limits damage and downtime.
Start the Year Secure, Not Reactive
Cybersecurity doesn’t have to be overwhelming or expensive. These 10 annual security checkups address the most common risks facing small businesses today—and most can be completed in a single afternoon.
A proactive approach at the start of the year can prevent costly emergencies later and give both business owners and employees peace of mind.
Infinity Networking can work with your business to make sure that all of these points are addressed going into the new year. Please call or email for a no-charge assessment today!
