--- title: "CT Cybersecurity Checklist: 12 Must-Dos for 2026" description: "A 12-point cybersecurity checklist for Connecticut small businesses: MFA, backups, patching, staff training, and state breach-law basics." lang: en json-ld: | [ { "@context": "https://schema.org", "@type": [ "LocalBusiness", "ProfessionalService" ], "@id": "https://technologyoncall.com/#business", "name": "Technology On Call", "alternateName": "The Tech Doctor", "url": "https://technologyoncall.com/", "logo": "https://technologyoncall.com/favicon.png", "image": "https://technologyoncall.com/og.png", "description": "Technology consultant for small business — we make technology, marketing, and AI work for small businesses in Connecticut so you can stop fighting your tools and get back to running your business.", "telephone": "+1-860-408-9066", "email": "help@technologyoncall.com", "priceRange": "$$", "currenciesAccepted": "USD", "paymentAccepted": "Cash, Credit Card, Check, ACH", "address": { "@type": "PostalAddress", "addressLocality": "Granby", "addressRegion": "CT", "postalCode": "06035", "addressCountry": "US" }, "geo": { "@type": "GeoCoordinates", "latitude": 41.9528, "longitude": -72.7895 }, "hasMap": "https://www.google.com/maps/place/Granby,+CT+06035", "openingHoursSpecification": [ { "@type": "OpeningHoursSpecification", "dayOfWeek": [ "Monday", "Tuesday", "Wednesday", "Thursday", "Friday" ], "opens": "08:00", "closes": "18:00" } ], "contactPoint": [ { "@type": "ContactPoint", "telephone": "+1-860-408-9066", "email": "help@technologyoncall.com", "contactType": "customer service", "areaServed": "US", "availableLanguage": [ "English" ] } ], "founder": { "@type": "Person", "name": "Paul Berg", "jobTitle": "Owner & Tech Doctor" }, "areaServed": [ { "@type": "State", "name": "Connecticut" } ], "sameAs": [ "https://www.facebook.com/paullberg", "https://www.linkedin.com/in/technologyoncall/", "https://www.youtube.com/@TechOnCall", "https://www.youtube.com/channel/UC4HAzLK0M7zTYw9sd2yoKPA" ] }, { "@context": "https://schema.org", "@type": "Organization", "@id": "https://technologyoncall.com/#organization", "name": "Technology On Call", "alternateName": "The Tech Doctor", "url": "https://technologyoncall.com/", "logo": "https://technologyoncall.com/favicon.png", "email": "help@technologyoncall.com", "telephone": "+1-860-408-9066", "founder": { "@type": "Person", "name": "Paul Berg" }, "sameAs": [ "https://www.facebook.com/paullberg", "https://www.linkedin.com/in/technologyoncall/", "https://www.youtube.com/@TechOnCall", "https://www.youtube.com/channel/UC4HAzLK0M7zTYw9sd2yoKPA" ] }, { "@context": "https://schema.org", "@type": "WebSite", "@id": "https://technologyoncall.com/#website", "url": "https://technologyoncall.com/", "name": "Technology On Call", "publisher": { "@id": "https://technologyoncall.com/#organization" }, "inLanguage": "en-US" }, { "@context": "https://schema.org", "@type": "Organization", "@id": "https://technologyoncall.com/#organization", "name": "Technology On Call", "alternateName": "The Tech Doctor", "url": "https://technologyoncall.com", "logo": { "@type": "ImageObject", "url": "https://technologyoncall.com/favicon.png", "width": 512, "height": 512 }, "image": "https://technologyoncall.com/og.png", "email": "help@technologyoncall.com", "telephone": "+1-860-408-9066", "founder": { "@type": "Person", "name": "Paul Berg" }, "foundingLocation": { "@type": "Place", "address": { "@type": "PostalAddress", "addressLocality": "Granby", "addressRegion": "CT", "addressCountry": "US" } }, "sameAs": [ "https://www.facebook.com/paullberg", "https://www.linkedin.com/in/technologyoncall/", "https://www.youtube.com/@TechOnCall" ] }, { "@context": "https://schema.org", "@type": "ProfessionalService", "@id": "https://technologyoncall.com/#business", "name": "Technology On Call", "alternateName": "The Tech Doctor", "description": "Small business technology support, website design, marketing, SEO, and AI solutions in Granby, CT and surrounding areas.", "url": "https://technologyoncall.com", "logo": "https://technologyoncall.com/favicon.png", "image": "https://technologyoncall.com/og.png", "telephone": "+1-860-408-9066", "email": "help@technologyoncall.com", "address": { "@type": "PostalAddress", "streetAddress": "3 Murthas Way, Apt 317", "addressLocality": "Granby", "addressRegion": "CT", "postalCode": "06035", "addressCountry": "US" }, "contactPoint": { "@type": "ContactPoint", "telephone": "+1-860-408-9066", "email": "help@technologyoncall.com", "contactType": "customer service", "areaServed": "US", "availableLanguage": [ "English" ] }, "areaServed": { "@type": "GeoCircle", "geoMidpoint": { "@type": "GeoCoordinates", "latitude": 41.9548, "longitude": -72.7901 }, "geoRadius": "50000" }, "founder": { "@type": "Person", "name": "Paul Berg", "jobTitle": "Owner & Tech Doctor" }, "priceRange": "$$", "openingHours": "Mo-Fr 08:00-18:00", "sameAs": [ "https://www.facebook.com/paullberg", "https://www.linkedin.com/in/technologyoncall/", "https://www.youtube.com/@TechOnCall" ], "makesOffer": [ { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Small Business IT Support" } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Website Design" } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Website Development" } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "SEO" } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Marketing Strategy" } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Computer Networking" } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "AI Solutions" } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Database Development" } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Drone Video Production" } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Virtual Tours" } } ] }, { "@context": "https://schema.org", "@type": "WebSite", "@id": "https://technologyoncall.com/#website", "name": "Technology On Call", "url": "https://technologyoncall.com", "publisher": { "@id": "https://technologyoncall.com/#organization" }, "potentialAction": { "@type": "SearchAction", "target": "https://technologyoncall.com/?q={search_term_string}", "query-input": "required name=search_term_string" } }, { "@context": "https://schema.org", "@type": "BreadcrumbList", "@id": "https://technologyoncall.com/blog/small-business-cybersecurity-checklist-connecticut#breadcrumb", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://technologyoncall.com/" }, { "@type": "ListItem", "position": 2, "name": "Blog", "item": "https://technologyoncall.com/blog" }, { "@type": "ListItem", "position": 3, "name": "The 12-Point Cybersecurity Checklist Every Connecticut Small Business Needs in 2026", "item": "https://technologyoncall.com/blog/small-business-cybersecurity-checklist-connecticut" } ] }, { "@context": "https://schema.org", "@type": "Article", "@id": "https://technologyoncall.com/blog/small-business-cybersecurity-checklist-connecticut#article", "headline": "The 12-Point Cybersecurity Checklist Every Connecticut Small Business Needs in 2026", "description": "A 12-point cybersecurity checklist for Connecticut small businesses: MFA, backups, patching, staff training, and state breach-law basics.", "image": "https://erucrvnsrebzwinakaxk.supabase.co/storage/v1/object/public/blog-images/auto/small-business-cybersecurity-checklist-fix.jpg", "datePublished": "2026-05-16T12:42:55.642602+00:00", "dateModified": "2026-05-16T12:42:55.642602+00:00", "author": { "@type": "Person", "@id": "https://technologyoncall.com/about#paul-berg", "name": "Paul Berg", "jobTitle": "Owner & Tech Doctor", "url": "https://technologyoncall.com/about", "worksFor": { "@id": "https://technologyoncall.com/#business" }, "sameAs": [ "https://www.facebook.com/paullberg", "https://www.linkedin.com/in/technologyoncall/", "https://www.youtube.com/@TechOnCall" ], "knowsAbout": [ "Small Business IT Support", "Website Design", "SEO", "AI Solutions", "Marketing Strategy", "Computer Networking" ] }, "publisher": { "@id": "https://technologyoncall.com/#organization" }, "mainEntityOfPage": { "@type": "WebPage", "@id": "https://technologyoncall.com/blog/small-business-cybersecurity-checklist-connecticut" }, "articleSection": "IT Support", "keywords": "cybersecurity, managed it services, connecticut, small business, security", "wordCount": 776, "inLanguage": "en-US" } ] --- ![Revisit consent button](https://cdn-cookieyes.com/assets/images/revisit.svg) We value your privacy We use cookies to enhance your browsing experience, serve personalised ads or content, and analyse our traffic. By clicking "Accept All", you consent to our use of cookies. Customise Reject All Accept All Powered by[](https://www.cookieyes.com/product/cookie-consent/?ref=cypbcyb&utm_source=cookie-banner&utm_medium=fl-branding) Customise Consent Preferences ![](https://cdn-cookieyes.com/assets/images/close.svg) We use cookies to help you navigate efficiently and perform certain functions. You will find detailed information about all cookies under each consent category below. The cookies that are categorised as "Necessary" are stored on your browser as they are essential for enabling the basic functionalities of the site. ... Show more NecessaryAlways Active Necessary cookies are required to enable the basic features of this site, such as providing secure log-in or adjusting your consent preferences. These cookies do not store any personally identifiable data. - Cookie \_\_cf\_bm - Duration 1 hour - Description This cookie, set by Cloudflare, is used to support Cloudflare Bot Management. - Cookie VISITOR\_PRIVACY\_METADATA - Duration 6 months - Description YouTube sets this cookie to store the user's cookie consent state for the current domain. - Cookie cookieyes-\* - Duration 1 year - Description CookieYes sets this cookie for consent solution management. Functional Functional cookies help perform certain functionalities like sharing the content of the website on social media platforms, collecting feedback, and other third-party features. - Cookie VISITOR\_INFO1\_LIVE - Duration 6 months - Description A cookie set by YouTube to measure bandwidth that determines whether the user gets the new or old player interface. - Cookie ytidb::LAST\_RESULT\_ENTRY\_KEY - Duration Never Expires - Description The cookie ytidb::LAST\_RESULT\_ENTRY\_KEY is used by YouTube to store the last search result entry that was clicked by the user. This information is used to improve the user experience by providing more relevant search results in the future. Analytics Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics such as the number of visitors, bounce rate, traffic source, etc. - Cookie \_ga\_\* - Duration 1 year 1 month 4 days - Description Google Analytics sets this cookie to store and count page views. - Cookie \_ga - Duration 1 year 1 month 4 days - Description Google Analytics sets this cookie to calculate visitor, session and campaign data and track site usage for the site's analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognise unique visitors. - Cookie session-id - Duration 1 hour - Description Amazon Pay uses this cookie to maintain a "session" that spans multiple days and beyond reboots. The session information includes the identity of the user, recently visited links and the duration of inactivity. - Cookie YSC - Duration session - Description YSC cookie is set by Youtube and is used to track the views of embedded videos on Youtube pages. Performance Performance cookies are used to understand and analyse the key performance indexes of the website which helps in delivering a better user experience for the visitors. No cookies to display. Advertisement Advertisement cookies are used to provide visitors with customised advertisements based on the pages you visited previously and to analyse the effectiveness of the ad campaigns. - Cookie \_\_Secure-YNID - Duration 6 months - Description YouTube cookie used to protect user security and prevent fraud, especially during the login process. - Cookie \_\_Secure-ROLLOUT\_TOKEN - Duration 6 months - Description YouTube sets this cookie to manage feature rollout and experimentation. It helps Google control which new features or interface changes are shown to users as part of testing and staged rollouts, ensuring consistent experience for a given user during an experiment. - Cookie \_\_Secure-YEC - Duration past - Description Description is currently not available. Uncategorised Other uncategorised cookies are those that are being analysed and have not been classified into a category as yet. - Cookie \_\_dpl - Duration 7 days - Description Stores consent preferences and privacy choices, remembers selections across visits, enabling compliant cookie behavior, streamlined functionality, and improved user experience. Reject All Save My Preferences Accept All Powered by[](https://www.cookieyes.com/product/cookie-consent/?ref=cypbcyb&utm_source=cookie-banner&utm_medium=sl-branding) [Skip to main content](#main-content) [![Technology On Call — "Online Or At Your Door"](/assets/toc-logo-og-D75giZ5W.png)](/) [Home](/)[About](/about)[Services](/services)[Web & Media](/web-media)[Blog](/blog)[Contact](/contact) [860-408-9066](tel:860-408-9066)[](tel:860-408-9066) [Join a Meeting](https://toc.screenconnect.com) Search… ⌘K 1. [Home](/) 2. [Blog](/blog) 3. The 12-Point Cybersecurity Checklist Every Connecticut Small Business Needs in 2026 [All articles](/blog) IT Support May 16, 2026 · 5 min read # The 12-Point Cybersecurity Checklist Every Connecticut Small Business Needs in 2026 You don't need an enterprise SOC. You need 12 basics done well. Here's the cybersecurity checklist we use with every CT small business client. Listen to this article · ~5 min listen Sarah 1× AI-narrated by Sarah · 2 parts, played seamlessly. Tap play to start. ![The 12-Point Cybersecurity Checklist Every Connecticut Small Business Needs in 2026](https://erucrvnsrebzwinakaxk.supabase.co/storage/v1/object/public/blog-images/auto/small-business-cybersecurity-checklist-fix.jpg) In this article 1. 1. [The 12-point checklist](#the-12-point-checklist) 2. 2. [Connecticut data breach law: the part nobody mentions](#connecticut-data-breach-law-the-part-nobody-mentions) 3. 3. [What this looks like on a managed plan](#what-this-looks-like-on-a-managed-plan) Cybersecurity advice for small business is almost always wrong in one of two ways: it's either Fortune-500 overkill (you don't need a Security Operations Center) or vague platitudes ("use strong passwords!"). The truth is in the middle — **12 specific basics, done consistently, stop ~95% of attacks aimed at Connecticut small businesses.** This is the same checklist we use with managed clients. Use it as a self-audit, then call us if you want help closing the gaps. The full managed program is on our [Managed IT Services in Connecticut](https://technologyoncall.com/services/it-support-ct) page. ## The 12-point checklist ### 1\. Multi-factor authentication (MFA) on every account that has it Email, banking, payroll, Microsoft 365, QuickBooks Online, your domain registrar. Use an authenticator app, not SMS, where possible. This single control blocks the vast majority of account takeovers. ### 2\. A real password manager, used by everyone Bitwarden, 1Password, or Keeper. The "sticky note under the keyboard" era ends today. The manager generates unique passwords per site — so one breached vendor doesn't compromise everything else. ### 3\. Automated, tested, off-site backups "Automated" means it runs without anyone clicking. "Tested" means you actually restored a file in the last 30 days. "Off-site" means a copy lives somewhere ransomware can't reach (immutable cloud storage, not a USB drive on the same network). ### 4\. Endpoint protection (EDR), not just antivirus Modern EDR tools detect behavior (ransomware encrypting files, credential theft) — not just known virus signatures. Microsoft Defender for Business, SentinelOne, and Huntress are common CT small-business picks. ### 5\. Patching on a schedule Windows updates within 14 days. Third-party apps (Chrome, Edge, Adobe, Zoom) within 30. Firmware on firewalls and switches quarterly. Most breaches exploit a patch that was available but not applied. ### 6\. Email filtering above the Microsoft 365 default Phishing is the #1 way CT small businesses get breached. Add a layer like Microsoft Defender for Office 365 (P1) or a third-party filter. Pair it with banner warnings on external emails. ### 7\. Separated admin accounts Nobody's daily-use account should be a domain admin or M365 global admin. Create a separate elevated account used only when needed. Limits blast radius if a regular account is phished. ### 8\. A documented offboarding process When someone leaves: disable accounts within 1 hour, revoke MFA tokens, reset shared passwords, recover the laptop, change Wi-Fi password if they had it. Write it down so it happens the same way every time. ### 9\. Annual security awareness training (and quarterly phishing tests) Most cyber insurance carriers now require this. KnowBe4, Hook Security, or Curricula. The training matters less than the consistent reinforcement — a quarterly fake phishing email teaches more than a one-hour video. ### 10\. Network segmentation (especially guest Wi-Fi) Customer/guest Wi-Fi must be on a separate VLAN from business systems. If you have IoT (cameras, smart thermostats, POS), they go on their own segment too. A compromised smart TV shouldn't reach your accounting server. ### 11\. Cyber insurance with current attestations If you have a policy, re-read it. Most renewals in 2025–2026 require you to attest to MFA, EDR, backups, and training. Lying on the questionnaire voids your coverage when you need it most. ### 12\. An incident response plan (1 page is fine) Who do you call first? Who notifies clients? Where's the backup? What's the cyber insurance claim number? A single laminated card in the manager's desk beats a 40-page binder no one reads. ## Connecticut data breach law: the part nobody mentions Connecticut General Statutes § 36a-701b requires notice "without unreasonable delay" — and within 60 days — if personal information of CT residents is compromised. That includes names plus SSNs, driver's license numbers, financial account numbers, medical info, or biometrics. The AG's office also gets notified. Translation: if you handle customer data and get breached, you have a legal clock running. Items #3 (backups) and #12 (IR plan) directly determine whether you meet that deadline gracefully or in panic mode. ## What this looks like on a managed plan If you're already on a managed IT plan, items 1, 3, 4, 5, 6, 7, and 10 should be handled for you — ask your provider for evidence on each. Items 2, 8, 9, 11, and 12 are partnerships: we configure and document, you enforce with your team. If you're handling this yourself and items 1–5 aren't all "yes," that's where to start this week. For a comparison of doing it yourself vs. outsourcing, read [Managed IT vs. Hourly Support in CT](https://technologyoncall.com/blog/managed-it-services-vs-hourly-it-support-connecticut). Want us to run through this checklist on your business — no charge, no pitch? Reach out via the [contact page](https://technologyoncall.com/contact) and we'll book 30 minutes. #cybersecurity #managed it services #connecticut #small business #security ## Need help with this in your business? Paul Berg, The Tech Doctor — friendly, low-pressure technology help across Connecticut. [Talk to Paul](/contact) ## Related articles [IT Support ### Managed IT Services vs. Hourly IT Support: Which Is Right for Your CT Business? Hourly support feels cheaper until the third invoice. Here's an honest comparison of managed IT services vs. break-fix for CT small businesses. ](/blog/managed-it-services-vs-hourly-it-support-connecticut)[IT Support ### What Does a Managed IT Provider Actually Do? (A Plain-English Guide for CT Businesses) MSP. RMM. EDR. The acronyms hide a simple job: keep your business running. Here's what a Connecticut managed IT provider actually does each week. ](/blog/what-does-a-managed-it-provider-do-connecticut)[IT Support ### How Much Does Small Business IT Support Cost in Connecticut? Straightforward Connecticut pricing for hourly, project, and managed IT support — what drives cost, hidden fees to watch, and the questions to ask before you hire. ](/blog/small-business-it-support-cost-connecticut) ## Comments Be the first to comment. ### Leave a comment Comments are reviewed before they appear. Your email is never shown publicly. Name \* Email (optional, not shown) Comment \* 0/4000 Submit comment [ Have a question? Get a real answer — instantly. Ask anything about IT, websites, marketing, or AI. Powered by Tech Doctor knowledge. Ask NOW! ](/search) ![Technology On Call](/assets/toc-logo-og-D75giZ5W.png) Online Or At Your Door Paul Berg — Tech Doctor Technology, marketing, and AI solutions for home-based, small, and medium-sized businesses. [](https://www.facebook.com/paullberg)[](https://www.linkedin.com/in/technologyoncall/)[](https://www.youtube.com/@TechOnCall?sub_confirmation=1) [Subscribe on YouTube](https://www.youtube.com/@TechOnCall?sub_confirmation=1) Tech tips by email Subscribe Double opt-in — we'll send a confirmation link. No spam, unsubscribe anytime. ### Quick Links [Home](/)[About](/about)[Services](/services)[Web & Media](/web-media)[Blog](/blog)[Contact](/contact) [Join a Meeting](https://toc.screenconnect.com) ### Contact [ 860-408-9066](tel:860-408-9066)[ help@technologyoncall.com](mailto:help@technologyoncall.com) Granby, CT 06035 [Serving all of Connecticut](/service-area) © 2026 Technology On Call. All rights reserved. [Privacy Policy](/privacy)[Terms of Service](/terms)[Disclaimer](/disclaimer) [Website by Technology On Call](https://technologyoncall.com) [](/admin "Admin")