Two Questions Every Business Leader Should Be Able to Answer

Cybersecurity advice often sounds like a shopping list. Two of the most useful checks cost nothing and need no technical background. A leader who can answer both is in a much stronger position when something goes wrong.

Most businesses have a backup of some kind. Fewer know whether it works. A backup that has never been restored is a guess, and the gaps tend to show up on the worst possible day.

Three gaps come up again and again: 

• A backup job that stopped weeks ago, with no alert to say so
• A copy that sits on the same network an attacker just reached
• A restore that takes days when the business needs hours

Ask your IT team or provider when something was last restored from backup. Ask how long it would take to get everyone working again, and what comes back first. A confident answer includes a real number and a recent test date. A long pause is useful information too.

Most incidents start small. A strange email, a login prompt that looked off, a file that would not open. The first person to notice is rarely in IT, so what happens next depends on whether that person speaks up.

People stay quiet for ordinary reasons. Some worry about being blamed. Others assume a coworker already reported it, or they do not know who to tell. Every hour of silence gives an attacker more room to work.

Leaders can fix this in a few minutes:

• Pick one place to report anything odd, such as a shared mailbox or a phone number
• Tell your team that early reports are always welcome, with no blame attached
• Make the report easy to send

A useful report needs only three details. It does not need to be polished or technical.

A rough note sent in five minutes beats a perfect one sent tomorrow.

Speaking up decides when the clock starts. Backups decide how long recovery takes. Together they shape the cost of a bad day more than most tools do.