Seems like a good general list for small businesses when there are no other security requirements to follow (PII, HIPAA, etc). If you aren't tech savvy enough t

Seems like a good general list for small businesses when there are no other security requirements to follow (PII, HIPAA, etc). If you aren't tech savvy enough to handle these rules, then at least bring someone to set these kinds of things up for you and your employees to follow. Either pay them to write up guides on how to handle it yourself in the future or have then come in every so often to check up on things.