Services · Security

Cyber security for a small business

Most of it is free. Here is what matters, in order.

Most small businesses are hit through email, stolen passwords and fake payment requests, not clever hacking. A few free steps close most of that, and they should come before you buy anything.

If you want a person to look, the first look is free.

Seven things that matter most

  • Email: two-factor login, and SPF and DMARC so nobody can send invoices as you.
  • UPI and bank fraud: call back before changing any payment details someone emailed you.
  • Backups: one copy away from the office, and restore it once to be sure.
  • Staff: their own logins, and remove them the day they leave.
  • Updates: turn on automatic updates for computers, phones and your website.
  • Your website: run the free check, and remove plugins you do not use.
  • Customer data: keep only what you need, and do not share it on WhatsApp groups.

If something has already happened

  1. Do not delete anything, and do not pay yet.
  2. Change passwords from a clean device, starting with email.
  3. Call your bank at once if money moved. Report on the national cybercrime helpline, 1930, or cybercrime.gov.in.
  4. Talk to us or another responder.

What this is not

Said plainly

  • The Nivasik Team is not a CERT-In empanelled auditor and holds no security certification. If a regulator or customer asks for a report from an empanelled auditor, or for a certificate, that comes from them, not from us.
  • No test proves a system is safe. It shows what was found, in the time and scope agreed.
  • Nothing is guaranteed: not a pass, not a certificate, not a result.

Questions people ask

What is the cheapest way to secure a small business?

Two-factor login, backups, updates and staff who ask before paying. All of that is free. Software and audits come after.

Does a small business need a security audit?

If you hold customer data or take payments online, a short look is worth it. Our free audit is for that.

What is the most common attack on small businesses?

Fake invoices and changed bank details by email, stolen passwords, and ransomware on an unpatched computer are among the commonest. Ask us for what fits your setup.

Do you offer managed security?

We set up tools such as EDR and SIEM and can run a retainer, agreed per engagement. We do not offer round-the-clock cover by default.

Ask for it

We reply within a day. Your details go to the Nivasik Team and nowhere else.