Practical cybersecurity for small businesses: security checkups, written security plans, and staff training on email fraud, backups and passwords.