We do metalwork, 5 people. Recently started keeping customer records on the computer. We know nothing about cybersecurity haven't had issues so far but starting to fear for the future.
We can't do it like a big company because we don't have the resources. But we want to ensure minimum security.
Where should we start? What can be done in the first week?
follow these steps for 5 people: 1. WEEK: install antivirus on every pc, turn on windows updates 2. WEEK: change all passwords (strong ones: 12+ chars, include symbols) 3. WEEK: start keeping customer data in encrypted files 4. WEEK: take backups weekly
budget: 2-3k TL in the first month. no need to hire a consultant, just watch turkish guides on youtube.
you'll see the benefits of starting small — after a month your system will be faster and employees will feel more secure.
wow nice plan. like we're the same size but haven't done any of this. do these steps really take 4 weeks?
Day 1: install antivirus on all. Day 2: change passwords. Day 3: set up backups. done. no time wasted per week.
changing passwords is hard, employees forget them... i wanna tell them to print a website to write passwords on but that shouldn't be the case right
when choosing antivirus, pick a licensed product — don't use demos or cracked versions. high malware risk.
if it's your first time, download a 'security checklist' from the internet. follow the steps one by one, none are hard.
Generally correct, but one part is missing. If you scold false alarms, nobody will report again.
I'm also curious if anyone does it differently.
Doki · Phishing awareness training · 2024
There is something to watch out for. Don't hesitate to ask; those who don't ask always pay more.
If you have questions, write them; I'll answer as best I can.
I have a question don't want to go off-topic though. The harder it is to reverse a decision, the slower you should make it.
This is my opinion I'm not claiming it's absolute truth.
The answer above hits the nail on the head. The real issue isn't the number, but what it's based on.
Let me share what happened to me; it might be useful. Processes without records never improve, because you don't know what to fix.
Good luck with that.
Correct in theory, but it doesn't work that way in practice. If you don't write this down from the start, it leads to arguments later.
The real issue isn't the number, but what it's based on. If I were you, I'd go this route.
Doki · Backup setup · 2026
The discussion got scattered, let me summarize. Don't hesitate to ask; those who don't ask always pay more.
Hope this helps.
Doki · Phishing awareness training · 2024
I dont think this advice fits everyone. Having backups accessible on the same network and with the same identity makes them part of the target.
Processes without records never improve because you dont know what to fix.