Cybersecurity is not only a concern for large corporations. Growing organisations depend on email, systems, networks and data that attackers target every day.
1. Control who can access what
Give every person their own account, use strong passwords with two-step sign-in, and grant access by role. Remove access the same day someone leaves or changes role. Shared logins make it impossible to know who did what.
2. Keep systems updated
Computers, phones, routers, firewalls, CCTV recorders and applications all need updates. Agree who is responsible, check monthly, and replace devices that no longer receive security updates.
3. Back up critical data
A backup is only useful if it can be restored. Keep at least one copy separate from your main systems, protect backup passwords, and test a restore regularly. Our backup and disaster recovery service can set this up.
4. Secure the network
- Change default passwords on every router, switch and camera.
- Separate staff, guest and CCTV networks.
- Use a properly configured firewall.
- Watch for unusual activity.
Our fibre and Wi-Fi guide explains how to plan a secure office network.
5. Train people
Phishing emails, fake mobile money messages, weak passwords and accidental sharing can undo expensive technical controls. Short, regular training with real local examples works better than one long session.
Plays from YouTube when you press play.
Know the law
Tanzania's Cybercrimes Act 2015 makes attacks on computer systems a crime, and the Personal Data Protection Act 2022 requires organisations to protect personal data and report breaches.
Build a security baseline
Extrion helps organisations assess their current environment and build a prioritised security plan. See our security auditing and risk service or book a consultation.
Start with our free cybersecurity checklist.
Frequently asked questions
What is the most important cybersecurity step for a small organisation?
Individual accounts with two-step sign-in, plus tested backups. Together they prevent and recover from the most common incidents.
How often should we train staff?
Short sessions every few months work better than a single annual course, especially with local examples such as fake payment messages.
Still stuck, or want more detail?
Ask for clarification, tell us a problem this did not solve, or suggest a topic. An engineer reads every message, and we use them to improve the Knowledge Center.
Last updated
Talk to Extrion about this topic
Book a consultation and we will help you map a practical next step.
