BO Use the latest version of your internet browser. Protect email with DMARC. Encrypt important information when it is stored on portable media and when it is sent via the internet. Change standard passwords and do not grant administrator rights to end users. Use 2-factor authentication or, as a minimum, strong passwords. Establish an emergency response plan for different types of incidents, and run drills to test the plan. Prepare a list of the company’s key goals, the values and value chains involved, where key data are stored, and who has access to these data. Map the companies security culture and identify what can be improved. Define the desired culture and carry out adapted annual training programmes to promote appropriate security culture. Focus on expertise in procurement and implement risk assessment that is deployed among the management. See Part 2 of the list of measures for additional information. Install security updates as soon as possible. Protect wireless networks with strong security mechanisms. Plan and document changes. Switch on logging, and review important logs regularly. Include cyber security in the work on risk at the company. Establish clear responsibility at the company, with effective reporting lines to the senior management and board of directors. TE Upgrade hardware and software. Eliminate unnecessary complexity and unused functionality. Block the running of nonauthorised programs. N IN A Establish sufficient systematics for security management, and make sure that an expert in the field supports the management in this work. T IO RN START-UP TIPS RA START-UP TIPS A