The four basics
- Sign-in: one account per person, ideally verified with a code sent to their phone.
- Permissions: the least that gets the job done, with sensitive information kept for the owner.
- Backups: automatic, regular and stored in a separate place.
- Export and delete: for a small number of people, with a record of what happened.
The risk and what protects against it
| Risk | Protection |
|---|---|
| An employee deletes data by mistake | Backups and limited delete permission |
| A leaving employee takes the customer list | Blocked export and an account disabled on the last day |
| An Excel file sent to the wrong person | Data in a system behind sign-in, not in a file |
| The computer fails or is stolen | A copy off the device that restores on another one |
Start this week
- 1Map where the data lives
Files, phones, email, chats. The number of copies will surprise you.
- 2End shared accounts
Each person with their own account and password.
- 3Test restoring a backup
A backup you have never restored is not a backup.
- 4Review the user list
Remove people who left and reduce permissions nobody needs.