• Give them their own accounts.

  Never share one login between people.

• Turn on two-step verification for their email and any key accounts.
• Install all pending updates and confirm security software is switched on.
• Set up a password manager and show them how to use it.
• Turn on a screen lock (PIN or biometric) with a short auto-lock time.
• Turn on device encryption where available if the device holds business data.
• Walk through the warning signs of phishing, and have them try our Spot the Phish puzzle in Learn & Play.
• Explain where business files are saved, and why not on personal USB sticks or personal accounts.
• Tell them who to call for tech help, and what to do if something looks wrong.
• Write down which accounts and access they were given, so it can be removed when they leave.

Sources: Government of Canada, Get Cyber Safe: “Get Cyber Safe’s quick guide to cyber security for small business” (getcybersafe.gc.ca); Canadian Centre for Cyber Security: “Don’t take the bait: Recognize and avoid phishing attacks” (ITSAP.00.101, cyber.gc.ca). Checked October 14, 2026.

Checklist by Tachyon Business & Computer Solutions · Vernon, BCwebitpartner.caNeed a hand? Get in touch.

• Stop.

  Don’t click anything else on that page or reply to the message.

• If you opened a file or installed something, disconnect the device from Wi-Fi or unplug the network cable.
• From a different, trusted device, change the password for any account you entered details into, and anywhere you reuse that password.
• Turn on two-step verification for those accounts if it isn’t already on.
• Check your email for unfamiliar sent messages and for forwarding rules you didn’t create.
• If you shared card or bank details, call your bank or card provider straight away.
• Run a full scan with your security software, and tell your IT provider or us.
• Write down what happened: the time, the message, and exactly what you clicked or entered.
• Report it to your local police and to the Canadian Anti-Fraud Centre (reportcyberandfraud.canada.ca, or 1-888-495-8501).
• Watch your accounts closely over the next few weeks for anything unusual.

Sources: Canadian Centre for Cyber Security: “Don’t take the bait: Recognize and avoid phishing attacks” (ITSAP.00.101, cyber.gc.ca); Government of Canada, Get Cyber Safe: “Get Cyber Safe’s quick guide to cyber security for small business” (getcybersafe.gc.ca); Canadian Anti-Fraud Centre: “Report fraud and cybercrime” (antifraudcentre-centreantifraude.ca). Checked October 14, 2026.

Checklist by Tachyon Business & Computer Solutions · Vernon, BCwebitpartner.caNeed a hand? Get in touch.

• List every device and every kind of data that should be backed up.
• Check that backups run automatically, and note the date of the last successful one.
• Do a test restore of a few real files, and confirm they open.
• Confirm at least one copy is stored somewhere separate, not only on the same computer.

  The Cyber Centre also recommends keeping one backup offline.

• Check that you can go back far enough in time if something is damaged and not noticed right away.
• Protect the backup account with a strong, unique password and two-step verification.
• Check there is enough storage space, and that subscriptions are paid and renewing.
• Remove access for people who no longer work with you.
• Write down how to restore, and who to call if you need help.

Sources: Canadian Centre for Cyber Security: “Tips for backing up your information” (ITSAP.40.002, cyber.gc.ca); Government of Canada, Get Cyber Safe: “Get Cyber Safe’s quick guide to cyber security for small business” (getcybersafe.gc.ca). Checked October 14, 2026.

Checklist by Tachyon Business & Computer Solutions · Vernon, BCwebitpartner.caNeed a hand? Get in touch.

• Install pending updates

  Computers, phones, tablets, and your Wi-Fi router’s firmware. CISA’s advice: don’t delay software updates.

• Turn on automatic updates

  So you stop having to remember.

• Use a password manager

  Replace weak or reused passwords, starting with your email and banking.

• Turn on multi-factor authentication

  Email, banking and anything that holds personal or business data.

• Set up automatic backups

  The Government of Canada suggests using at least two storage options (for example an external drive plus cloud storage).

• Test a restore

  Open a few backed-up files to make sure they work, and compare them with the originals.

• Close accounts and delete apps you no longer use

  Old accounts are a way in for criminals, and can be used to send phishing links to your contacts.

• Scan your statements

  Look through bank and card statements for anything you don’t recognize.

• Practise spotting phishing

  Revisit our Spot the Phish puzzle, and report suspicious messages.

Sources: CISA, Secure Our World (cisa.gov/secure-our-world); Government of Canada, Get Cyber Safe: “How backups keep your data safe” and “What to do if you are a victim of a phishing scam” (getcybersafe.gc.ca); CSE ITSAP.80.019 on router best practices. Checked October 14, 2026.

Checklist by Tachyon Business & Computer Solutions · Vernon, BCwebitpartner.caNeed a hand? Get in touch.

• Know how long to keep records

  Generally six years from the end of the last tax year they relate to. Some records, such as long-term property acquisitions and disposals, are kept longer. Ask your accountant.

• Know where records must be kept

  The CRA says you must keep records at your place of business or residence in Canada unless it gives written permission otherwise, and records kept outside Canada but accessed electronically from Canada don’t count as kept in Canada. If you use cloud backup, ask your accountant whether this affects you.

• Back up electronic copies

  Keep a tested backup of scans and files (see the Year-end tidy-up).

• Expect CRA contact only through its real channels

  The CRA says it sends email only if you signed up for notifications or asked for a link during a call or meeting, and uses text only for multi-factor authentication if you chose the telephone option.

• Recognize what the CRA will never do

  Threaten arrest or prison, demand immediate payment by e-transfer, crypto, prepaid cards or gift cards, send refunds by e-transfer or text, or ask for personal or financial information in a voicemail or email.

• Check the web address

  Official CRA addresses start with canada.ca or end with cra-arc.gc.ca. Look-alikes add extra words or odd endings such as .info or .cfd.

• Don’t click, type

  Don’t use links or attachments in unexpected messages. Type the official address yourself or use your CRA account.

• Phone back on a number you found yourself

  If a call seems wrong, hang up and call the CRA at an official number.

Sources: Canada Revenue Agency: “Where to keep your records, for how long, and how to request permission to destroy them early” and “Recognize a scam” (canada.ca). This is general information, not tax advice. Checked October 14, 2026.

Checklist by Tachyon Business & Computer Solutions · Vernon, BCwebitpartner.caNeed a hand? Get in touch.

• Before: lock your devices

  Use a password, PIN or biometric.

• Before: turn on multi-factor authentication

  For all devices and accounts.

• Before: back up your data

  To a hard drive or cloud storage, to protect against threats like ransomware.

• Before: set up protection

  Use a VPN for public Wi-Fi if you must, turn on your firewall and antivirus, and download streaming content at home.

• During: turn off Wi-Fi and Bluetooth when not in use

  So you don’t connect to unsecured networks or devices by accident.

• During: use cellular data, not public Wi-Fi, for sensitive things

  Use a VPN if cellular isn’t available.

• During: keep devices with you or locked in a safe

  And watch for people looking at your screen.

• During: avoid public charging kiosks

  Use your own charger and accessories.

• After: scan before reconnecting

  Scan devices with antivirus before connecting them to your home network.

• After: delete travel apps you don’t need and check your accounts

  Report anything unusual to your financial institution, local police and the Canadian Anti-Fraud Centre.

Sources: Government of Canada, Get Cyber Safe: “Get Cyber Safe travel checklist” (getcybersafe.gc.ca). Checked October 14, 2026.

Checklist by Tachyon Business & Computer Solutions · Vernon, BCwebitpartner.caNeed a hand? Get in touch.