Category: Risk Management for Businesses

Cybersecurity: A Small Business Guide

Small business cybersecurity guide: owner implementing MFA and ransomware protection for SMB data security
Essential cybersecurity for small businesses—lock down your operations with our proven guide to MFA, backups, and threat prevention

A single cyber breach could wipe out years of hard work—lost data, stolen funds, or regulatory fines that small operations can’t absorb. Recent stats show 43% of cyberattacks target small businesses, with average recovery costs exceeding $25,000. This guide delivers practical steps to secure your operations, answer common concerns, and position your business for growth.

Why Small Businesses Need Cybersecurity Now

Small businesses face unique risks: limited budgets mean weaker defenses, and owners often juggle IT duties without expertise. Cybercriminals exploit this—phishing, ransomware, and weak passwords account for 80% of breaches. Proactive cybersecurity isn’t optional; it’s essential for protecting customer trust, complying with laws like HIPAA or PCI-DSS, and avoiding downtime that kills revenue. Implementing basics now prevents 95% of common attacks.

Practical Action Steps for Owners and IT Teams

Follow these prioritized steps to build a robust defense. Owners oversee policy and budget; IT executes technical controls.

  • Conduct a Risk Assessment: Inventory all devices, apps, and data flows. Identify crown jewels (customer records, financials). Use free NIST frameworks to score vulnerabilities—takes 1-2 days. Reassess quarterly.
  • Enforce Multi-Factor Authentication (MFA): Activate MFA on email, cloud apps (e.g., Google Workspace, QuickBooks), and VPNs. Blocks 99% of account takeover attempts. Roll out via group policy; train staff in 30 minutes.
  • Secure Endpoints and Networks: Install endpoint detection (e.g., Microsoft Defender or CrowdStrike Falcon for SMBs). Set up firewalls, segment networks (guest Wi-Fi separate from core systems), and patch software monthly—automate via WSUS or Intune.
  • Backup Religiously: Adopt 3-2-1 rule: 3 copies, 2 media types, 1 offsite (cloud like Backblaze). Test restores quarterly. Ransomware can’t win without backups.
  • Train Your Team: Run phishing simulations monthly (e.g., KnowBe4 free tier). Cover password hygiene (16+ characters, no reuse) and social engineering. Owners lead by example.
  • Monitor and Respond: Deploy SIEM lite (e.g., Splunk Cloud free tier) or managed detection. Document incidents in a playbook for quick isolation.

Budget tip: Start under $500/month with open-source tools like pfSense firewall and ClamAV antivirus, scaling to pro services as revenue grows.

FAQ: Client Questions Answered

Q: How much does cybersecurity cost for a 10-person business?
A: Basic setup runs $50-200/user/year (software + training). Managed services add $100-300/user/month. ROI hits via breach avoidance—downtime alone costs $8,000/hour for small firms.

Q: What if we don’t store sensitive data?
A: Attackers use you as a gateway to suppliers/partners. One compromised vendor email can cascade. Even basic ops need protection.

Q: How do I know if we’re compliant?
A: Map to frameworks like CIS Controls (free). For payments, PCI scan quarterly via tools like Qualys. Document everything for audits.

Q: Ransomware hit—now what?
A: Isolate infected systems, restore from backups, notify authorities if data breached. Don’t pay—fuels crime. Engage experts within 24 hours.

Q: Is cloud safer than on-prem?
A: Cloud providers (AWS, Azure) offer enterprise-grade security if configured right (e.g., IAM roles, encryption). Misconfigs cause 80% of cloud breaches—audit permissions monthly.

How Farmhouse Networking Elevates Your Security

Farmhouse Networking specializes in tailored cybersecurity for small businesses in accounting, healthcare, and nonprofits—industries we know inside out. We handle assessments, deployments, and 24/7 monitoring so you focus on growth.

Our approach:

  • Custom audits pinpoint gaps missed by generic tools.
  • Managed services include proactive threat hunting and compliance reporting (HIPAA, SOC 2 ready).
  • SEO-optimized client portals deliver real-time dashboards, building trust that converts leads.

We’ve helped Oregon firms cut breach risk by 90% while boosting uptime 99.9%. No jargon—just results.

Take Control Today

Don’t wait for a breach to act. Email support@farmhousenetworking.com for a free risk assessment and custom roadmap. Secure your business legacy now.

Most Popular Home Routers Have ‘Critical’ Flaws

Zyxel TP-Link Netgear router security flaws RCE Wi-Fi encryption bypass timeline
Consumer routers = compliance nightmares for business networks

Even though we recently sent out another email newsletter about this topic, we have to keep raising this issue as the work from home remains a regular occurrence. A German think tank analyzed 127 popular home routers with the majority having at least one flaw (D-Link, Netgear, ASUS, Linksys, TP-Link and Zyxel were affected by 53 critical-rated vulnerabilities each). The biggest problem is that most (91%) are built on top of an old version of Linux operating system and their makers rarely publish updates.

There are several solutions that we can discuss to secure your work from home networks, so contact us for assistance.

Vulnerability Scans & Penetration Testing

Vulnerability scanning automated broad coverage vs penetration testing manual exploit depth compliance table
Know your compliance testing requirements

Many industries we serve are under some sort of compliance requirements – HIPAA, PCI, GDPR, etc. and several of these require some sort of vulnerability scans or penetration testing:

HIPAA Section 164.308(a)(1)(ii)(A) states:

RISK ANALYSIS (Required).
Conduct an accurate and thorough assessment of the potential risks and vulnerabilities to the confidentiality, integrity, and availability of electronic protected health information held by the [organization].

PCI DSS Requirement 11.3:

The scope of a penetration test, as defined in PCI DSS Requirement 11.3, must include the entire CDE perimeter and any critical systems that may impact the security of the CDE as well as the environment in scope for PCI DSS. This includes both the external perimeter (public-facing attack surfaces) and the internal perimeter of the CDE (LAN-LAN attack surfaces).

GDPR Article 32 states:

A process for regularly testing, assessing and evaluating the effectiveness of technical and organisational measures for ensuring the security of the processing

Farmhouse Networking has begun offering both internal and external network vulnerability scans and penetration testing for clients who fall under compliance requirements. We also provide remediation planning and implementation for any issues found during the scans. 

If your company is has compliance requirements for internal or external vulnerability scans or penetration testing, then contact us for assistance.

Small business owner monitoring cybersecurity dashboard with active threat detection and malware protection tools.

Discover threats quickly, remediate immediately, and mitigate the impact of malware and breaches

Cyberattacks aren’t just targeting large corporations anymore — small and mid-sized businesses are in the crosshairs, often because attackers assume you have weaker defenses. One click on a malicious email or one unpatched system can open the door to ransomware, data theft, or business downtime that costs thousands.

As a business owner, you can’t afford to wait until something goes wrong. The key is being proactive: discover threats quickly, remediate issues immediately, and mitigate the impact of malware and breaches before they spiral out of control.

Why Quick Detection and Response Matters

Every minute counts when it comes to cybersecurity. According to IBM’s 2025 Cost of a Data Breach Report, the average time to identify and contain a breach is 207 days — and the faster a business can detect and respond, the lower the cost and damage.

For small businesses, early detection can mean the difference between minor disruption and major data loss. Automated tools, continuous system monitoring, and staff cybersecurity training all play vital roles in keeping your operations safe.

Practical Steps to Protect Your Business

Here are actionable steps you and your IT department can take to strengthen your cybersecurity posture today:

  1. Implement Continuous Threat Monitoring
    Use endpoint detection and response (EDR) tools or managed detection and response (MDR) services to monitor your systems 24/7. These tools use AI to identify suspicious activity before it becomes a breach.
  2. Keep Systems and Software Updated
    Outdated software is a hacker’s best friend. Schedule regular updates and patches for operating systems, firewalls, and applications to close known vulnerabilities.
  3. Use Multi-Factor Authentication (MFA)
    Protect user accounts with multiple verification layers. MFA stops 99% of automated attacks, even if passwords are leaked.
  4. Create a Clear Incident Response Plan
    Develop a step-by-step playbook for how your team will respond to a security incident — including who to contact, how to isolate affected systems, and how to communicate with clients.
  5. Backup Data Regularly (and Securely)
    Use automated, encrypted backups stored both onsite and offsite. Test restores regularly to ensure reliability during an emergency.
  6. Train Employees on Cyber Hygiene
    Human error causes most breaches. Run regular phishing simulations and cybersecurity awareness sessions so your team can spot risks early.
  7. Engage a Trusted IT Partner
    Collaborate with professionals who specialize in threat detection and breach response. A managed IT provider can bring enterprise-level security to your SMB without the enterprise-level price.

Clients Often Ask…

Q: What’s the best way to know if a threat is active in my network?
A: Real-time monitoring is the gold standard. Tools like EDR or SOC-as-a-Service actively scan your endpoints, networks, and cloud systems for anomalies so you catch incidents before data is compromised.

Q: How do we remediate a breach once it’s detected?
A: First, isolate affected systems to stop the spread. Next, identify the source, remove the malware, and restore clean backups. Finally, perform a full post-incident review to close the gap that allowed the breach.

Q: Is all this cybersecurity really affordable for small businesses?
A: Yes — scalable managed IT services make advanced protection accessible. Think of it as business insurance that pays for itself by preventing downtime and data loss.

Q: How do I explain cybersecurity investments to my leadership team or board?
A: Focus on the financial impact — downtime, lost data, and reputational damage often cost far more than preventative cybersecurity services. Showing this risk-to-cost ratio makes the business case clear.

How Farmhouse Networking Can Help

At Farmhouse Networking, we’ve helped Oregon SMBs stay secure, compliant, and productive through tailored cybersecurity solutions designed for real-world small business needs.

Here’s what we offer to help you discover, remediate, and mitigate threats effectively:

  • 24/7 Threat Monitoring: Managed detection and response (MDR) tools that catch threats before they cause harm.
  • Rapid Remediation Support: Our specialists act fast to contain and remove threats as soon as they appear.
  • Comprehensive Incident Response Planning: From establishing protocols to training your team, we help you prepare for the unexpected.
  • Data Backup and Recovery Solutions: Automated, encrypted backups ensure you can restore your systems quickly after an incident.
  • Employee Training Programs: Interactive sessions help staff recognize phishing attempts and adopt safe online habits.

We don’t just sell tools — we partner with your business to strengthen your defenses and give you peace of mind.

Stay Ahead of Cyber Threats

Cyber threats evolve every day, but your business doesn’t have to face them alone. With the right combination of proactive monitoring, smart response, and expert guidance, you can keep operations smooth and your data secure.

Ready to protect your business?
Email support@farmhousenetworking.com today to learn how Farmhouse Networking can help you stop threats before they stop your business.

Secret Service disrupted 100K SIM card network threatening UN communications NYC

United Nations – Hacked

In a report released by Untangle, a leading firewall / security vendor, the details of the recent United Nations Hack were detailed. Here is a summary of the report

Hack Details
“It has been recently revealed the United Nations was victim to a cyber attack starting in July 2019. Hackers gained access to and compromised 42 servers and 25 are still categorized as suspicious for three different domains: those of the United Nations offices in Geneva and Vienna and of the office of High Commissioner for Human Rights. It is estimated that hackers may have up to 400GB of staff records, health insurance, and commercial contact data.”

This attack has been classified as an APT (Advanced Persistent Threat) where the attackers gain access then setup a variety of ways to remain on the network while they collect the data they are after. This hack was due to a vulnerability stemming from not installing software updates in a timely manner. .The United nations found the threat then issues a notice to employees to reset their passwords in August of 2019. They did not inform personnel of the hack until January 2020. 

These two factors, patching and training, should be addressed by every company to keep their data safe.

If your company needs help with patching or security training, then contact us for assistance.

Switching WHM Backup from AWS Glacier to Backblaze B2

All someone has to do is look at the pricing model above to see why Backblaze is a no brainer for long term storage (not to mention the first 10GB of storage is free. With its recent inclusion as a destination for web server’s WHM backup, Farmhouse Networking has been recommending our hosting provider customers to make the switch from AWS Glacier. Here is the steps to make the switch:

Setup Backblaze Buckets

  1. Login to Backblaze account
  2. Click on the Create Bucket button in the B2 Cloud Storage Buckets section

3. Give the Bucket a name and keep the bucket private for the backups. Click on the Create a Bucket button.

4. Copy down your Backblaze Bucket name and Backblaze Bucket ID

Setup Backblaze Application Key

  1. Click on the App Keys section
  2. Click on Add a New Application Key

3. Give the Backblaze Application Key a name, chose the newly created bucket from the list and make sure to leave the Type of Access as “Read and Write”. Click the Create Key button.

4. Make sure to copy down the Backblaze Application keyID and Backblaze Application applicationKey. This will be the only time they are both shown. If you lose the Backblaze Application applicationKey then you will have to delete the current one and create a new one.

Setup WHM Backup to Backblaze

  1. Connect to WHM as root user and choose Backup Configuration from the menu. The specific WHM backup settings are not discussed here, but feel free to contact us for advise on how to do so.

2. Click on Additional Destinations. Chose Backblaze B2 from the Destination Type and click on the Create New Destination button.

3. Enter in a backup name. Click on the “System Backups” if that is desired. Leave the Backup Directory blank. Enter in the Backblaze Bucket ID and Backblaze Bucket Name copied down earlier. Enter in the Backblaze Application Key ID and Backblaze Application Key. Click on the Save and Validate Destination button.

Make sure to disable your old AWS Glacier backup destination. All backups on Glacier should be set to auto delete according to a lifecycle, but if not then wait 120 days from creation to remove them to avoid any penalties. Speaking of lifecycles, it is a good idea to change the lifecycle settings on the Backblaze bucket to auto delete after a determined number of days since they do charge for total storage utilized.

If your company is would like to discuss the layers of security you have in place, then contact us for assistance.

Server room UPS systems protecting small business during power outage automatic backup

Is the power out again?

It seems lately that the power company in the area has not been able to offer consistent service power to the city. This has left many businesses down without the technology they need to operate properly. These power outages cause data loss and damage computer components.

My own unexpected outage

Once upon a time, about two weeks ago, the unexpected happened at our offices. A semi-truck carrying a large backhoe on a trailer drove between two buildings in the area. The landlord had wired power between buildings and the truck driver did not lower the arm of the backhoe low enough. Sure enough the wire was snagged by the backhoe’s arm and pulled from the building. Needless to say the power was out to that part of the building until the landlord took care of the matter.

What can be done?

Farmhouse Networking recommends that all business workstations, servers, and networking equipment be protected by an uninterruptible power source aka UPS or battery backup. When the power goes out the right size battery backup will keeps things running for about 15-30 minutes to allow the last touches to be added to whatever was being worked on and things to be shutdown gracefully.

If your company is looking to better protect itself against power outages, then contact us for assistance.

 

Your Data is Already at Risk. Protect it Today!

 

Managed EDR MDR vs traditional antivirus comparison detection response coverage
Your data demands more than signatures

Did you know that malware accounts for 20% of all security incidents?

And that’s just one threat! Your data, no matter how proactive you are from a security standpoint, is constantly vulnerable to a multitude of security threats, the list of which is constantly growing. From ransomware, worms and phishing attacks to human error, your data needs to have a multi-layer defense in place to not only prevent downtime but recover quickly in the event that disaster strikes.

The following are just a few staggering facts about just how vulnerable our systems are to attacks and outages:

• According to Microsoft, the potential cost of cyber-crime to the global community is a $500 billion, and a data breach will cost the average company about $3.8 million!1
• A whopping 1 in 131 emails contain malware2
• 230,000 new malware samples are produced every day, and that number is projected to continue growing3
• It will take the average business about 197 days to detect a breach on their network4

If your company is looking to better protect its data, then contact us for assistance.

Archives

Categories

Plant a Seed @ 541-761-9549
233 Rogue River Hwy #873 Grants Pass, OR 97527
Mon-Fri: 9:00am-5:00pm
support@farmhousenetworking.com
© 2016-2026 - Farmhouse Networking. All rights reserved
Terms and Conditions Privacy Policy

Evaluation Signup

Error: Contact form not found.

And God will generously provide all you need. Then you will always have everything you need and plenty left over to share with others. As the Scriptures say,
“They share freely and give generously to the poor. Their good deeds will be remembered forever.”
For God is the one who provides seed for the farmer and then bread to eat. In the same way, he will provide and increase your resources and then produce a great harvest of generosity in you. - 2 Corinthians 9:8-10