Blog Series – August 2017

Building a Cybersecurity Baseline for SMEs

Small and medium enterprises (SMEs) have become prime targets for cyber threats due to often limited resources and unstructured security strategies. In Argentina and across Latin America, this risk profile is rising steadily as more businesses transition to digital platforms and cloud-based tools.

August 2017 was the right time for SMEs to revisit their cybersecurity posture and establish a baseline of controls to ensure both operational integrity and regulatory compliance. A baseline doesn’t need to be complex—it needs to be practical, repeatable, and business-aligned.

Why a Baseline Matters

A cybersecurity baseline is a defined set of minimum controls that protects your systems, data, and users from common threats. For SMEs, this often includes:

• Antivirus and endpoint protection on all devices
• Firewall setup and secured routers
• Password policies and multi-factor authentication (MFA)
• Data backups—ideally using the 3-2-1 rule
• Basic staff training to identify phishing and social engineering

Steps to Establish Your Baseline

Start by auditing what you currently have—software, hardware, and policies. Then, assess the following areas:

• Access Control: Who can access what, and how are permissions managed?
• Device Management: Are personal devices allowed? Are they secured?
• Updates: Are systems patched regularly to fix vulnerabilities?
• Monitoring: Is there visibility over system usage, login attempts, or anomalies?

Balancing Budget and Protection

Budgets in SMEs are often tight, so implementing a cybersecurity baseline needs to be cost-effective. Focus on:

• Free or low-cost security tools that still offer enterprise-grade features
• Training staff using publicly available cybersecurity awareness materials
• Automating updates and backups where possible

Remember, a cybersecurity incident is far more expensive than prevention.

Eduardo Wnorowski is a Technologist and Director at Virtus Group.
With over 22 years of experience in IT and consulting, he brings deep expertise in networking, security, infrastructure, and transformation.
Eduardo helps Argentine businesses navigate change with clarity, security, and trust.
🔗 Connect on LinkedIn