---

1. Enable Full Disk Encryption on Windows using BitLocker

Encrypting your drives prevents unauthorized access to customer data.

1. Open the Start menu and search for "BitLocker".
2. Select "Manage BitLocker".
3. Choose the drive you want to encrypt and click "Turn on BitLocker".
4. Select an authentication method (password or USB key).
5. Save the recovery key in a secure location.
6. Choose encryption mode and start the encryption process.

2. Encrypt Sensitive Files with VeraCrypt Where Bitlocker is Not Available

Use VeraCrypt to create encrypted file containers or encrypt entire drives.

1. Download and install VeraCrypt from official site ↗.
2. Open VeraCrypt and click "Create Volume".
3. Select "Create an encrypted file container" and click "Next".
4. Choose "Standard VeraCrypt volume".
5. Specify a location and size for the encrypted container.
6. Select encryption algorithm and hash function.
7. Set a strong password and format the volume.
8. Mount the volume using VeraCrypt when needed.

3. Use Strong Passwords and Multi-Factor Authentication (MFA)

Secure access to systems and customer data by implementing strong passwords and MFA.

• As a minimum use at least 12 characters, mixing letters, numbers, and symbols. learn more here ↗.
• Enable two-factor authentication for accounts that store customer data.
• Use a password manager to generate and store passwords securely. more info here ↗.

4. Keep Software and Systems Updated

Regular updates patch security vulnerabilities that hackers exploit.

• Enable automatic updates for Windows, macOS, and other software.
• Regularly update antivirus and firewall software.
• Remove outdated and unsupported software from your systems.

5. Secure Data Backups

Ensure customer data is backed up and protected against cyber threats.

• Use encrypted external drives or secure and GDPR compliant cloud services for backups.
• Perform regular backups and test recovery procedures.
• Store backups in a separate, secure location.

6. Train Employees on Data Protection

Educate staff on security best practices to reduce human error.

• Conduct regular security training sessions.
• Teach employees to recognize phishing scams and suspicious links.
• Limit access to customer data based on job roles.
• Secure SME offers free training that can be found here ↗.