Small Business Cyber Hygiene Series: Part 4: Secure Your Devices: Updates, Antivirus, and Hardening
Introduction
Your devices — laptops, desktops, tablets, and phones — are the backbone of your business, and for many individuals, they’re the center of daily life. They hold your email, documents, financial data, customer information, and access to every system you use. If a device is compromised, everything connected to it is at risk.
The good news: securing devices doesn’t require expensive tools or an IT department. A few simple habits go a long way.
Why Device Security Matters
Most cyberattacks don’t target your business directly — they target your devices. Outdated software, missing patches, weak settings, and unprotected endpoints are some of the easiest ways for attackers to get in.
Strong device security:
- Blocks malware and ransomware
- Prevents unauthorized access
- Reduces the impact of phishing
- Protects sensitive data
- Supports compliance with NIST CSF, CIS Controls, and FTC Safeguards
Device security is foundational cyber hygiene — and it’s achievable for any small business.
What Good Device Security Looks Like
A small business with secure devices typically has:
- Automatic updates enabled
- Modern antivirus or endpoint protection
- Strong device‑lock settings
- Encrypted hard drives
- Limited installation permissions
- A simple, repeatable device‑review process
These practices dramatically reduce risk with minimal effort.
How to Secure Your Devices (Step‑by‑Step)
1. Keep Devices Updated
Updates fix vulnerabilities that attackers actively exploit. When devices fall behind, risk increases quickly.
Turn on automatic updates
- Windows Update
- macOS Software Update
- iOS and Android updates
- Browser updates (Chrome, Edge, Firefox)
- Application updates (Office, Adobe, Zoom, etc.)
Restart devices regularly
Many updates don’t apply until the device restarts.
Remove unsupported devices
If a device can’t receive updates, it shouldn’t access business data.
2. Use Antivirus or Endpoint Protection
Antivirus is still essential — but modern solutions do more than scan for viruses.
What to look for
- Real‑time protection
- Ransomware blocking
- Web protection / URL filtering
- Automatic updates
- Centralized management (if you have multiple employees)
Examples of modern solutions
- Microsoft Defender (built into Windows)
- Sophos Home / Business
- Bitdefender
- CrowdStrike Falcon (for more advanced needs)
Avoid “free” antivirus
Free tools often lack essential protections or include unwanted software.
3. Harden Your Devices
“Hardening” means tightening settings so attackers have fewer opportunities.
Minimum hardening steps
- Require a password, PIN, or biometric login
- Enable full‑disk encryption (BitLocker, FileVault)
- Disable unused accounts
- Limit who can install software
- Turn off Bluetooth when not needed
- Use a screen lock after 5–10 minutes of inactivity
Bonus protections
- Block USB storage devices
- Require admin approval for new apps
- Use browser extensions that block malicious sites
These small changes significantly reduce risk.
4. Secure Mobile Devices
Phones and tablets often hold just as much sensitive data as laptops.
Minimum protections
- Screen lock (PIN, fingerprint, or face unlock)
- Automatic updates
- Device encryption (usually enabled by default)
- Remote‑wipe capability (Find My iPhone, Find My Device)
Bonus protections
- Disable app sideloading
- Limit app permissions
- Use mobile threat protection (if available)
5. Remove What You Don’t Need
Unused software and old apps increase risk.
Regularly remove
- Old programs
- Browser extensions
- Unused mobile apps
- Trial software
- Tools no longer needed for business operations
Less software = fewer vulnerabilities.
Device Security Checklist
Monthly
- Restart devices to apply updates
- Check antivirus status
- Remove unused apps or software
Quarterly
- Review device hardening settings
- Confirm encryption is enabled
- Ensure all devices are still supported
Annually
- Replace outdated or unsupported devices
- Review your device‑security policy
- Refresh employee training on safe device use
Key Takeaway
Your devices are the front line of your business’s security. Keeping them updated, protected, and hardened dramatically reduces the risk of malware, ransomware, and unauthorized access — and these steps are simple enough for any small business to maintain.
Need Help Securing Your Devices?
SQ Risk helps small businesses build simple, sustainable device‑security practices that align with NIST CSF and real‑world needs.
Small Business Cyber‑Hygiene Series
Start Here:
- Introduction: Why Cyber‑Hygiene Matters
- Know What You Have (Identify)
- Protect Access: Passwords, MFA, and Accounts
- Secure Your Devices — Updates, Antivirus, and Hardening (You are here)
Next Articles:
5. Back Up What Matters — The 3‑2‑1 Rule
6. Defend Your Inbox — Phishing & Email Security
7. Monitor for Trouble — Detection Basics
8. Respond Effectively — What To Do When Something Goes Wrong
9. Recover Quickly — Getting Back to Normal
10. Build a Security‑First Culture
11. Bonus: Safe Use of AI for Small Businesses
12. Cyber‑Hygiene Checklist: A One‑Page Summary