Cyber attacks on Indian SMEs rose by 67 % in 2023 according to CERT-In. Most breaches exploit well-known, easily preventable vulnerabilities. This checklist addresses the top 20.

Identity & Access

  • Enforce MFA on all admin accounts.
  • Audit user privileges quarterly — principle of least privilege.
  • Disable default credentials on all network devices.

Patching & Updates

  • Automate OS patching — critical patches within 72 hours of release.
  • Maintain a software inventory; remove end-of-life applications.

Backup & Recovery

  • Follow the 3-2-1 rule: 3 copies, 2 media types, 1 offsite.
  • Test restoration monthly — backups are useless if unrestorable.