Steps to work through yourself :

• Create a long and strong login password

  for your website that is different from any used for other services. We recommend a passphrase of four or more words.

• Turn on two-factor authentication (2FA)

  2FA verifies you are who you say you are, by asking for a second piece of information (often a code) as well as your password. This adds an extra layer of security.

• Keep your software up-to-date

  This includes your content management system (CMS), any plugins or external modules you use, and other items such as your web server.

• Back up your business data regularly

  Set the backups to take place automatically and store them somewhere secure, but easy to get to, such as a locked drawer or cupboard, preferably offsite. Having backups means you can restore your data quickly and easily if it’s lost, leaked or stolen.

• Create an incident plan

  To guide you if something goes wrong. This should include the contact details for your IT and communications support people. Having a plan will help you minimise the impact of an incident and get back on your feet quickly.

• Report cyber security incidents to CERT VU

  They can advise you on next steps. The information you provide will also be helpful in creating preventative advice for others.