Accounts and MFA
Multi-factor sign-in on email and key systems.
SME Cyber Hygiene Check
An SME cyber hygiene check is a short review of the basic security controls, such as multi-factor sign-in, backups and patching, that stop most attacks on small businesses. Most attacks on small businesses succeed because of basics: no multi-factor sign-in, no working backup, unpatched laptops, shared passwords. We check the basics quickly and tell you what to fix first, in plain language.
SME Cyber Hygiene Check
What it is
A short, practical review of the everyday security controls that stop most attacks on small and medium businesses, with a prioritised list of fixes.
Why organisations need it
Ransomware, account takeover and invoice fraud hit Malaysian SMEs every day, and most incidents exploit the same few gaps. The PDPA's Security Principle also expects practical steps to protect personal data. A hygiene check is the cheapest way to close the gaps before an incident does it for you.
What the engagement covers
Backups
Whether backups exist, are separate and can be restored.
Patching
Operating systems, browsers and key software.
Devices
Laptops and phones, encryption and screen locks.
Passwords
Shared and reused passwords, and password managers.
Staff habits
Phishing awareness and reporting.
What the business gets out of it
Affordable
Priced for SMEs.
Quick
Days, not weeks.
Plain language
No jargon.
Biggest risks first
Fix list in order.
A foundation
Ready for insurance or customer questionnaires.
How it works
How the engagement runs
01
Questionnaire
Short online questionnaire.
02
Walkthrough
Call or visit to verify.
03
Review
Checking key settings.
04
Report
Fix list in plain language.
05
Follow-up
Optional help implementing fixes.
Deliverables
What you receive
Hygiene scorecard
Simple rating per area.
Fix list
Prioritised actions.
Backup test result
Can you restore?
Policy templates
Simple acceptable use and password rules.
Follow-up call
Answering questions.
Who it is for
Who this is built for
Industries
Company sizes
Departments
FAQ
FAQ
No. Antivirus helps, but most attacks on small businesses succeed through stolen passwords without multi-factor sign-in, missing or untested backups, unpatched software and shared accounts. Those gaps are what the hygiene check looks for, because antivirus does not close any of them.
Usually a few days from questionnaire to report: a short questionnaire, a review of key settings and practices with whoever looks after your IT, and a plain-language report listing what to fix first, second and later.
The check tells you what to fix and in what order, with steps simple enough for most IT providers to follow. If you want hands-on help, we can implement the fixes as an add-on, such as switching on multi-factor sign-in or setting up backups.
It covers the basics insurers typically ask about, such as multi-factor sign-in, backups and patching. Having the report and the fixes in place makes insurance questionnaires quicker to answer honestly.
No. It is a practical check of basic controls, not an attempt to break into your systems. For most small businesses that is the right first step, because the basics are where most attacks succeed.