Small and medium sized businesses often get short shrift when it comes to security advice. The Canadian Centre for Cyber Security has published a set of Baseline Cyber Security Controls for Small and Medium Businesses.
The material is fairly basic, but it is a decent start.
............
Other posts: https://community.isc2.org/t5/forums/recentpostspage/user-id/1324864413
This message may or may not be governed by the terms of
http://www.noticebored.com/html/cisspforumfaq.html#Friday or
https://blogs.securiteam.com/index.php/archives/1468
