Cybersecurity
Plain-English guides to protecting your business: email security, ransomware, MFA, monitoring, and the habits that matter more than products. 43 articles.
Cybersecurity for a small or mid-sized business is less about buying the right product than about closing the handful of doors attackers actually use: a reused password, an unpatched laptop, an email that looked like it came from the boss. These guides explain the moving parts in plain English, from what MFA and EDR really do to how ransomware unfolds hour by hour, so you can judge your own exposure and ask sharper questions of whoever looks after your systems.
Most were written from incidents we have worked on for Oregon businesses, which is why they favor the checklist over the lecture. If you are starting from scratch, begin with the three guides on the right, then read the ones that match your situation. Resource One's cybersecurity services put the same layers in place and watch them around the clock.
DNS and Domain Security: Protecting the Name Everything Else Depends On
Your domain is a single point of failure for email, web, and trust — registrar lockdown, DNS hygiene, expiration safeguards, and protective DNS explained.
Installing Software Safely: The Deployment Discipline for Small Business
Most malware arrives as a download someone chose — safe sources, the fake-installer trap, testing before rollout, and the request path that makes it all workable.
Least Privilege: Everyone Gets Exactly What Their Job Needs
Least privilege scopes everyone's everyday access to their actual role — why access only ever grows on its own, role-based design, and the twice-yearly review.
Antivirus vs. EDR vs. XDR vs. MDR: What the Letters Mean and What You Actually Need
Plain-English guide to the endpoint security alphabet — what antivirus, EDR, XDR, and MDR each do, what changed, and which one a small business actually needs.
Security Cameras on the Business Network: The Watchers Need Watching
IP cameras are computers with a history of terrible security — segmentation, password hygiene, firmware, cloud-vs-local recording, and the vendor-access question.
Modern Email Security: The Five Layers Between an Attacker and Your Inbox
No single filter stops modern email attacks — the five-layer model that does: authentication, filtering, links and attachments, people, and response.
SPF, DKIM, and DMARC: Stopping Criminals From Sending Email as You
Email authentication in plain English — what SPF, DKIM, and DMARC each do, why your domain needs all three, and how to roll out DMARC without breaking anything.
Executive Impersonation: When 'the CEO' Emails Asking for a Favor
How CEO fraud works — why it targets your most helpful people, the gift card and wire variants, and the two-rule defense that leadership has to say out loud.
Password Managers for Business: Why, Which Kind, and How to Roll One Out
The case for a business password manager, how to choose one, the rollout that gets real adoption, and the recovery and offboarding details that matter.
Device Encryption: The Setting That Decides Whether a Lost Laptop Is a Breach
Encryption converts a stolen device into a stolen brick — how BitLocker and its kin work, the recovery-key detail that bites, and enforcing it fleet-wide.
Security Logging & Monitoring for Small Business: Seeing What Happened, and When It Matters
What security logs are for, the five sources worth keeping, why unwatched logs only help after the fact, and the right-sized monitoring path for a small business.
Why Smart People Click Phishing Emails (It Was Never About Intelligence)
Phishing works on attention, not IQ — the psychology attackers exploit, why your best people are prime targets, and what actually changes the click math.
Patch Management: The Boring Discipline That Closes Most Doors
Why patching is the highest-value routine in IT — how attackers exploit known flaws, what a real patch process covers, and the exceptions that need managing.
Business Email Compromise: The Scam That Costs Small Businesses the Most
How business email compromise works, the five variants aimed at SMBs, why it beats technical defenses, and the verification rules that shut it down.
Data Loss Prevention: Keeping the Sensitive Stuff From Walking Out
DLP watches data leaving — how it actually works, why classification comes first, the accidental-vs-deliberate distinction, and a rollout that doesn't cry wolf.
Managing the Browser: Securing the App Where All the Work Happens
The browser became the workplace — extension risks, built-in password stores, update discipline, and the managed-browser policies that quietly close it all.
Mobile Device Management: Company Data on Phones Without the Drama
MDM governs company data on phones and tablets — the personal-device privacy answer that makes rollouts succeed, lost-device response, and the BYOD middle path.
Inside EDR: What Endpoint Detection and Response Actually Does All Day
A closer look at how EDR works — the behavioral telemetry it records, how detections fire, what containment looks like, and the deployment details that matter.
Threat Hunting: Looking for the Intruder Who Didn't Trip the Alarm
Threat hunting assumes detection missed something and goes looking — what hunters actually do, why dwell time makes it matter, and the right-sized SMB version.
What Actually Happens During a 2 A.M. Cyberattack (With and Without Coverage)
A minute-by-minute walkthrough of the same overnight attack under two conditions — 24/7 monitored response versus discovery at opening time.
How to Spot a Phishing Email: 10 Red Flags Anyone Can Check
The ten warning signs of a phishing email, why modern phishing is harder to spot than it used to be, and exactly what to do when a message feels off.
Security Awareness Training That Actually Works (and Isn't Annual Slideshow Theater)
What effective security awareness training looks like — short and recurring, simulations that teach instead of trap, and the reporting culture that makes it real.
Buying MDR: What a Managed Detection and Response Service Actually Includes
MDR is the night shift you can't staff — what the service actually does, what a real SOC includes, the pricing shape, and the questions that expose pretenders.
Secure Remote Access: Letting People In Without Leaving the Door Open
How to give employees and vendors remote access safely — why exposed RDP is the classic breach, VPN done right, modern alternatives, and the rules that matter.
Vulnerability Management: Finding the Holes Before Someone Else Does
Patching fixes the holes you know about — vulnerability management finds them: scanning, exposure checks, exploited-in-the-wild prioritization, and the SMB rhythm.
The One-Page Incident Response Plan Every Small Business Should Have
You don't need a binder — you need one page: who to call in what order, who decides, the first moves for common incidents, and where the page lives.
From Training to Program: Building Security Awareness That Runs Itself
Training is an activity; a program is a system — the annual calendar, the roles, onboarding integration, champions, and the metrics that prove it's working.
Business Wi-Fi Security: Beyond the Password on the Whiteboard
Office Wi-Fi security in practice — the shared-password problem, WPA3 and per-user authentication, guest isolation, and the rogue equipment nobody planned.
Security Escalation: Deciding at 2 A.M. Who Gets Woken Up, and For What
The gap between detection and response is an escalation decision — severity tiers, autonomous-action boundaries, contact paths, and the handoffs that fail.
Passwordless Authentication: The Beginning of the End for Passwords
Passkeys and passwordless sign-in replace the secret that keeps leaking — how they work in plain English, why they resist phishing, and a sane adoption path.
Data Classification for Small Business: Three Buckets, Not Thirty Labels
A right-sized approach to data classification — three tiers, where each lives, who touches it, and why sorting your data first makes every other control cheaper.
Why 24/7 Security Monitoring Matters (Attackers Read Your Business Hours)
Attacks are timed for nights, weekends, and holidays on purpose — why around-the-clock monitoring changes outcomes, and what real 24/7 coverage looks like.
Network Segmentation: Why Your Office Shouldn't Be One Big Room
A flat network lets one compromise reach everything — the four zones every small business should have, what talks to what, and the pragmatic path to get there.
Firewall Management: The Guard at the Door Needs Managing Too
A firewall is only as good as its rules, firmware, and review rhythm — what managed firewall care includes, rule hygiene, and the end-of-life cliff to watch.
Running Your First Incident Response Tabletop: A Script for the Worst Tuesday
How to run a cyber-incident tabletop — the scenario script, the facilitator's injects, the roles to test, and turning the stumbles into a shorter list next year.
Building Layered Email Security in Microsoft 365: The Concrete Version
The five-layer email defense model, implemented in Microsoft 365 — what EOP gives everyone, what Defender adds, the settings to turn on, and the honest gaps.
Zero Trust for Small Business: The Useful Idea Under the Buzzword
Zero trust translated for small business — the one principle underneath the marketing, why the old castle model failed, and five moves that get you most of it.
Privileged Access: Why Nobody Should Do Their Day Job as an Admin
Admin accounts are the keys to everything — how attackers hunt them, why daily-driver admin rights are the classic mistake, and a right-sized fix for small business.
What Is MFA? Multi-Factor Authentication Explained for Business Owners
How multi-factor authentication works, why passwords alone fail, which MFA methods are strongest, and how to roll MFA out without a staff revolt.
Ransomware 101: How Attacks Actually Happen and How Small Businesses Prepare
How ransomware attacks unfold step by step, why small businesses are targeted, what recovery really costs, and the defenses that actually matter.
The Identity Recovery Plan: When the Account System Itself Is the Casualty
Every recovery assumes you can log in — what happens when identity itself is compromised or locked, break-glass accounts, and the recovery paradox to solve now.
The Employee Offboarding IT Checklist: Same Day, Every Time, No Exceptions
The complete IT offboarding checklist — accounts, devices, remote access, SaaS logins, and the data preservation step to do first, plus who owns each item.
Ransomware: The First 72 Hours, Hour by Hour
A practical walkthrough of the three days after a ransomware discovery — containment, the calls, the pay-or-restore decision, and the mistakes that make it worse.