Free live webinar

You’re not collateral damage.
You’re the target.

You already know the four: MFA, updates, backups, admin access. So did most of them. Knowing isn’t the gap — the gap is the difference between having a backup and having one that works. Come find out which of yours does.

96%

of ransomware victims last year were small and mid-sized businesses.
Verizon Data Breach Investigations Report, 2026

The webinar

4 simple security habits every small business can do on its own

Date

Tuesday, August 25, 2026

Time

11:00 AM MDT

10:00 AM PDT · 1:00 PM EDT

Where

Online

Joining link emailed after you register

Save my seat →

Free to attend · no pitch, no jargon

The pattern

Nobody picks you. A script does.

Almost every small-business ransomware case follows the same four steps. Each step has one habit that breaks it — which is exactly what we’re covering.

Step 1 — the way in

They find an unlocked door

Not by targeting you. By scanning the whole internet for software nobody got around to updating. In 2026, exploiting an unpatched vulnerability became the #1 way attackers get in — 31% of all breaches, overtaking stolen passwords for the first time.

Habit 02 — Update & patchbreaks this step

Step 2 — the login

They sign in as someone who works there

No hacking required — just a password lifted months earlier from an infected home laptop. Among ransomware victims hit by credential theft, half had credentials stolen within 95 days of the attack. Turning on MFA blocks over 99.2% of account-compromise attempts.

Habit 01 — Multi-factor authbreaks this step

Step 3 — the spread

One account becomes every account

A regular login is a nuisance. An administrator login is the whole company. Admin rights are what turn a single compromised mailbox into every file your business owns.

Habit 04 — Limit admin accessbreaks this step

Step 4 — the ask

They encrypt it all and name a price

Median ransom last year: $139,875. But 69% of victims paid nothing — overwhelmingly the ones who could restore from a backup and walk away. A tested backup turns a catastrophe into a bad afternoon.

Habit 03 — Back up your databreaks this step

Sources: Verizon Data Breach Investigations Report 2026 (31,000+ incidents, 145 countries); Microsoft Entra research on MFA effectiveness.

What we’ll cover

Four habits — in the order the evidence says to do them.

No secrets here — these are the four every security firm names, and we’ve put them in the order the numbers above support. What almost nobody checks is whether their own version of each one actually holds. That’s the part we do live, with your questions.

Turn on multi-factor authentication

Most people who say MFA is on are using the weakest factor there is — a code sent to an inbox an attacker may already be sitting in. We’ll show you how to tell which factor you’re actually on, and the handful of accounts to fix before any others.

Start here — highest return, zero cost

99.2%

of account attacks blocked

Update & patch

“Updates are on” almost always means Windows is on. It rarely means the router, the plugins, or the app nobody has opened in a year — and that is the 31% above. We’ll go through what’s really in scope, and what’s quietly outside it.

31%

of breaches start here

Back up your data

Nearly every business has backups. Far fewer have ever restored from one. There’s a short test that tells you which group you’re in — and it’s much better to run it on a Tuesday than during an incident.

69%

of victims paid nothing

Limit administrator access

Admin gets handed out like cash and almost never handed back. We’ll walk through how to see who holds it right now — the answer tends to surprise people — and how to trim it without slowing anyone down.

1 → all

what admin turns one login into

Save your seat.

Free to attend. No jargon, no product demo in disguise, and nothing that needs a budget approval to act on. We’ll email you the joining link.

Your hosts

Two people who do this every day.

Rick Myers

Founder & vCISO, CISSP · Caldera Cybersecurity Services

Thirty years protecting data and guiding teams — from helping launch the first Wireless AMBER Alert system to running incident response for organizations under real pressure. Rick brings Fortune 500 security leadership to businesses that don’t have a security team.

Donald Gardner

Fractional Governance, Risk & Compliance Analyst · Caldera Cybersecurity Services

Donald works with small teams on the practical side of compliance — turning frameworks and audit requirements into steps a business can actually finish, without a compliance department to hand them to.

Can’t wait until August?

Find out where you stand today.

A free assessment shows you exactly which of these four you’ve already got covered — and which one to fix first. No cost, no obligation.

Book a free assessment →