NIST Cybersecurity Framework
NIST CSF 2.0 framework: Identify, Protect, Detect, Respond, Recover — applied for small business.
Knowledge base
SMB IT Knowledge Base.
A curated, cross-referenced wiki on small-business IT topics.
Federal guidance
SBA, FTC, and NIST.
The plain-language starting points. Written for owners rather than engineers, and free of vendor interest.
FTC Cybersecurity for Small Business
FTC guidance on email security, remote access, vendor security, insurance, and incident response.
SBA Cybersecurity for Small Business
SBA guidance on employee training, network security, updates, MFA, and finding an assessment.
FBI
Fraud, ransomware, and reporting.
The FBI pages describe how these crimes actually run and tell you where to report one while the money may still be recoverable.
FBI Cybersecurity Resources
FBI resources on business email compromise, ransomware, spoofing, and IC3 reporting.
CISA
The federal cyber defense agency.
CISA's most practical guides, broken down into the elements that matter for small business.
CISA Cyber Essentials
CISA's four essential cybersecurity practices for small businesses with free toolkits and starter guides.
CISA StopRansomware
CISA's StopRansomware hub: a one-stop location for ransomware prevention tips, FAQs, and reporting resources for businesses and individuals.
Payment cards
If you take card payments.
PCI DSS applies to every business that accepts cards. The obligation usually comes through your merchant bank.
PCI DSS for Small Merchants
PCI DSS security standards for businesses that accept credit cards: passwords, terminals, patching, encryption.
Copilot & AI security
Governing agents in the Microsoft 365 ecosystem.
Microsoft's own guidance for securing Copilot, Copilot Studio agents, and the data they touch — defense-in-depth, the Control System framework, and the agent security playbook.
Copilot Studio Governance and Agent Security Playbook
Five-phase lifecycle governance for Microsoft 365 agents: discovery, architecture, build, testing/deployment, and monitoring. Covers DLP policies, RBAC, MFA, sensitivity labels, and audit logging.
Security for Microsoft Copilot
Microsoft's defense-in-depth security model for Copilot: identity, data protection, oversharing prevention, and the two security dashboards.
Copilot Control System — Security and Governance
The three-pillar Copilot Control System framework: security/governance, management controls, and measurement/reporting. Foundational vs. optimized controls mapped to license tiers.
Microsoft 365
Securing the tenant you already pay for.
Most Microsoft 365 subscriptions include far more security than is ever switched on. These are the vendor's own instructions for switching it on.
Microsoft 365 Business Premium vs Business Standard
Side-by-side comparison of Microsoft 365 Business Premium and Business Standard for SMBs. Premium includes Defender for Business, Defender for Office 365 P1, and Intune — Standard is productivity-only.
Microsoft 365 Business Premium
Microsoft's integrated productivity, security, and device management suite for SMBs (1-300 users). Includes all Business Standard apps plus Defender for Business, Defender for Office 365 Plan 1, and Intune Plan 1.
Microsoft 365 Business Standard
Microsoft's productivity-focused M365 plan for SMBs. Includes apps, email, Teams, OneDrive, SharePoint — but lacks Defender for Business, Defender for Office 365 P1, and Intune device management.
Microsoft Security for Small Business
Microsoft 365 security features: Zero Trust, Defender for Business, MFA, and the free SMB cybersecurity playbook.
Apple
Macs, iPhones, and iPads.
Apple's security documentation is good and almost never read. Start with the account pages.
Apple Security for Small Business
Apple device security: built-in malware protection, passkeys, 2FA, automatic updates, and social engineering awareness.
Google Workspace and Google accounts.
Hardening checklist, admin best practices, and consumer-facing security tips.
Google Workspace Security for Small Business
Google Workspace security: admin account hardening, 2-Step Verification, security keys, and phishing protection.
Facebook and Instagram
Business accounts and pages.
A hijacked business page is a real and common loss for small businesses, and recovering one is far harder than protecting it.
Meta Business Security
Meta business account security: 2FA, security alerts, ad spend monitoring, and social engineering defense.
Managed IT platforms
Tools and platforms OK Computer recommends for accounting firms.
Vendor-managed platforms for cloud hosting, security, backup, and compliance — vetted for the workflows and threats Oklahoma accounting firms actually face.
Rightworks Cloud Premier
All-in-one cloud platform for accounting firms offering hosted apps, managed IT, 24/7 support, and enterprise-grade security in a unified workspace.
Rightworks Transaction Pro
Transaction Pro imports, exports, and deletes QuickBooks data between QuickBooks, Excel, and CSV formats — saving hours of manual data entry for accounting firms.
Rightworks
Rightworks is a managed IT platform for accounting and tax firms, offering cloud hosting, security, backup, and support services with dedicated help centers for each product.
Nonprofit initiatives
Free decryption tools and prevention advice.
The No More Ransom Project is a public-private partnership providing free decryption tools for ransomware victims and prevention guidance backed by law enforcement and cybersecurity companies.
No More Ransom Project
No More Ransom is a nonprofit initiative offering free decryption tools, ransomware prevention advice, and a Q&A resource for victims.
Credentials
Passwords, passphrases, passkeys, and MFA.
Stolen and reused credentials remain the most common way in. This is the one category worth understanding properly rather than just complying with.
FIDO Passkeys
How passkeys work: phishing-resistant, passwordless authentication using Face ID, fingerprint, or PIN.
Password Management
Password manager recommendations, passphrase vs password, MFA, and why password reuse is dangerous.
Operation Privacy
A free dashboard to remove your business and personal data from broker sites, set up credit freezes, and manage digital identity.
Need help applying any of this?
OK Computer provides owner-operated managed IT for Oklahoma small businesses. Book an appointment or send a note.