Practical things you can print, pin up or adopt, written for a small business rather than an enterprise. All free, no email address required, no sign-up.
The five warning signs, on one page, big enough to read from across the room. There is a blank line at the bottom for whoever staff should report to.
Print it and put it where the team makes their tea. (PDF · 1 page · A4)
Download Phishing red flags poster
What to do, and what not to do, in the first hour of something going wrong. Disconnect but do not switch off, do not delete the evidence, ring the bank before anything else.
Fill in the contact lines now, while nothing is wrong. (PDF · 1 page · A4)
Download The first hour incident card
A policy you can adopt as your own, covering approved tools, what must never be typed into an AI tool, checking what comes out, and who to tell when something slips.
A starting point to adapt, not legal advice. (PDF · 3 pages · fill-in template)
Download AI acceptable use policy template
Scope plus the five controls, as thirty plain-English questions. Work out where you stand before you pay for an assessment.
There is an interactive version you can tick off online. (PDF · 2 pages · A4)
Download Cyber Essentials readiness checklist
What to do when something stops you working: a fire, a flood, a week without the internet, or the one person who knows the invoicing being in hospital. Mostly boxes for you to fill in.
Built for a small business, so it is six pages rather than forty. (PDF · 6 pages · fill-in template)
Download Business continuity plan template
See how long a password would survive a real cracking attempt, and get a passphrase worth using instead. Runs entirely in your browser: nothing you type is sent anywhere.
The checklist above, as something you can tick off online. Your answers stay in your browser so you can come back to a half-finished list.