← All posts
Andre Rizzo
Founder & Lead Developer
Security··7 min read
SMB cybersecurity 2026 checklist
87% of Italian ransomware hits SMBs via trivial errors.
NIS2 now mandates seriousness.
Identity & access
MFA. Separate admin accounts. SSO at 20+. 24h ex-employee disable.
Real backups
3-2-1-1-0. Quarterly restore test.
Endpoint & network
Modern EDR. Auto patching. Segmentation.
People
Phishing simulations 4x/year.
NIS2
Risk assessment, 24/72h reporting, board accountability. Fines up to 2% revenue.
Costs
€8-25k/year basics. Single ransomware: €200-800k.