Cybersecurity
Articles & Guides
45 articles on cybersecurity from the Secure Techies team — practical guidance for businesses across Los Angeles and Southern California.
Cybersecurity
Browse every article filed under cybersecurity.
CybersecurityA HIPAA Security Risk Analysis We Could Defend
How Secure Techies ran a HIPAA security risk analysis for a clinic: ePHI map, ranked gaps, and a treatment …
CybersecurityAn Incident Response Tabletop With Real Tickets
How Secure Techies ran an incident response tabletop for a manufacturer using real tickets, not a movie …
CybersecurityConditional Access Without Locking Agents Out
How Secure Techies rolled out Entra Conditional Access for a brokerage: report-only first, then MFA, without …
CybersecurityMicrosoft 365 Copilot Security: Fix Oversharing First
Microsoft 365 Copilot security is mostly permissions: what Copilot can see, oversharing, labels, and …
CybersecurityDMARC for Small Business: From Monitor to Reject
DMARC for small business, in order: SPF and DKIM first, then p=none, then quarantine, then reject. How to read …
CybersecurityPasskeys for Business: When MFA Is Not Enough
Passkeys for business explained: phishing-resistant sign-in vs SMS and push MFA. Who should enroll first in …
CybersecurityMicrosoft Teams Phishing: The Inbox Is Not the Only Door
Microsoft Teams phishing bypasses SPF and DMARC. How external chat, guests, and files get abused, and the …
CybersecurityDisable Legacy Authentication in Microsoft 365
Disable legacy authentication in Microsoft 365 so MFA cannot be skipped. Find old IMAP, SMTP, and app …
CybersecuritySharePoint External Sharing: Anyone-Links Are Not a Workflow
SharePoint external sharing settings that actually hold: disable Anyone-links, expire guests, pick a default, …
CybersecurityBreak-Glass Account in Microsoft 365: The Door You Hope to Never Use
A Microsoft 365 break-glass account is an emergency admin excluded from Conditional Access. How to build one, …
CybersecurityBitLocker Encryption for Small Business
BitLocker encryption for small business: why a lost laptop is a breach without it, how Intune enforces it, …
CybersecurityMicrosoft 365 Global Admin Best Practices
Microsoft 365 Global Admin best practices: two cloud admins, no daily mail on those accounts, …
CybersecurityWhy Manual Penetration Testing Is Preferred Over Automated Testing
Why manual penetration testing beats automated testing for logic flaws, APIs, and chained attacks, and when …
CybersecurityHow Security Assessments and Penetration Testing Are Conducted
How security assessments and penetration testing find vulnerabilities on a new platform: infrastructure, APIs, …
CybersecurityWhat Is a Unified Cybersecurity Platform and What It Solves
What a unified cybersecurity platform is, the problems it solves (alert fatigue, silos, slow response), and …
CybersecurityWhy Security Is a Big Data Problem for Enterprises
Why security is a big data problem for enterprises: volume, variety, velocity, and veracity of SIEM, EDR, and …
CybersecurityHow to Design the UI for a Cybersecurity SaaS Platform
How teams design a cybersecurity SaaS UI: user research, wireframes, iterative tests, then build to spec so …
CybersecurityHow SIEM Detection and Response Cuts Alert Fatigue
How SIEM detection and response (SDR) makes threats more visible and reduces alert fatigue: one dashboard, …
CybersecurityMicrosoft 365 MFA Without Locking Out the Board
How Secure Techies rolled out Microsoft 365 MFA at a Valley nonprofit: shared mailboxes, Authenticator, a …
CybersecurityA Two-Week Business Firewall Cleanup
How Secure Techies cleaned a private-school firewall in two weeks: any-any leftovers, unused VPN, staff vs …
CybersecurityEmployee Offboarding IT Checklist: Same-Day Access Close
Employee offboarding IT checklist for Microsoft 365: block sign-in, revoke sessions, inbox rules, devices, and …
CybersecuritySharePoint Oversharing Cleanup for a Media Agency
How Secure Techies locked SharePoint external sharing at a media agency: Anyone links off, stale guests gone, …
CybersecurityA Close Call With a Fake Wire Instruction
How Secure Techies handled a fake wire instruction at a law firm: mailbox review, MFA, email authentication, …
CybersecurityCrowdStrike Outage Response for a Healthcare Practice
How Secure Techies recovered a clinic after the July 2024 CrowdStrike outage: triage, BitLocker, Safe Mode, …
CybersecurityDark Web Credentials We Could Actually Reset
How Secure Techies handled a dark web credential alert at a Valley tech firm: reset, MFA, leftover guests, …
CybersecurityIT Risk Assessment for a Financial Services Firm
How Secure Techies ran a NIST-aligned IT risk assessment for a financial firm: ranked gaps, a 90-day plan, and …
CybersecurityGuest Wi-Fi That Stopped at the Register
How we isolated restaurant guest Wi-Fi from the POS network: guest VLAN, deny-LAN, client isolation, and a …
CybersecurityGuest Wi-Fi Security for Offices: Isolate Visitors the Right Way
Guest Wi-Fi security for offices: isolate visitors from printers, files, and POS. VLAN, client isolation, …
CybersecurityMicrosoft 365 Security Checklist: Harden Your Tenant in 2026
A practical Microsoft 365 security checklist for small and mid-size businesses: MFA, Conditional Access, email …
CybersecuritySmall Business Cybersecurity Checklist: 2026 Priorities That Matter
A practical small business cybersecurity checklist: MFA, backups, patching, email security, access control, …
CybersecurityNetwork Vulnerability Assessment: Find Weaknesses Before Attackers Do
What a network vulnerability assessment covers, how it differs from a pen test, how often to run one, and how …
CybersecurityRemote Work Security Checklist: Protect Hybrid Teams in 2026
A remote work security checklist for hybrid teams: MFA, device hardening, secure access, home Wi-Fi, data …
CybersecurityEDR vs. Antivirus: Why Traditional Antivirus Isn't Enough Anymore
Traditional antivirus vs. modern endpoint detection and response (EDR) — why signature-based AV misses today's …
CybersecurityHow to Build a Cybersecurity Incident Response Plan for Your Business
A practical guide to building an incident response plan — the six phases, who does what, and why planning your …
CybersecurityTop 5 Cybersecurity Threats Facing Businesses in 2026
The top cybersecurity threats facing businesses in 2026 — AI phishing, ransomware-as-a-service, supply chain …
CybersecurityBusiness Email Compromise: The Scam That Costs Companies Billions
Business email compromise is the costliest cybercrime today. Learn how the scam works, why it's so effective, …
CybersecurityChoosing a Network Security Company in Los Angeles: A 2026 Guide
How to choose a network security company in Los Angeles — what network security covers, the controls every …
CybersecurityPassword Management Best Practices: Stop Reusing Passwords Before It Costs You
Why weak and reused passwords cause most breaches, what actually makes a password strong, and how a password …
CybersecurityDark Web Monitoring: How to Know When Your Business Data Has Leaked
What the dark web is, how stolen business credentials end up for sale there, and how dark web monitoring warns …
CybersecurityZero Trust Security Explained: What It Means for a Small Business
Zero trust security in plain English — what 'never trust, always verify' means, why the old castle-and-moat …
CybersecurityPhishing and Email Security: How to Protect Your Business in 2026
A practical guide to phishing and email security for businesses — how attacks work, the layered defenses that …
CybersecurityCybersecurity Services in Los Angeles: How to Protect Your Business in 2026
A practical guide to cybersecurity services for Los Angeles businesses — the layers you need, what they cost, …
CybersecurityMulti-Factor Authentication (MFA): The Cheapest Security Win Your Business Can Make
What multi-factor authentication is, why it stops almost all account takeovers, and how to roll it out across …
CybersecurityThe 2026 Ransomware Protection Playbook for Small Businesses
A practical, step-by-step ransomware protection plan for small businesses in 2026 — how attacks happen, how to …
CybersecurityEmployee Security Awareness Training: Your Strongest Defense in 2026
Why security awareness training is the highest-return security investment in 2026 — what it covers, how often …
Ready to stop worrying about your IT?
Get a free, no-pressure assessment of your network, security, and backups from a local team that picks up the phone.