Build the Business.
Grow the Business.
Protect What You’ve Built.
Small business protection is more than buying insurance. Strong businesses also protect cash, data, contracts, records, systems and the ability to continue operating when something unexpected happens.
Six layers of small business protection.
Small business protection cannot eliminate every risk. The goal is to identify major exposures, reduce avoidable risk and make sure the business can recover when something goes wrong.
Identify
Understand the financial, legal, operational and technology risks.
Insure
Transfer appropriate risks through suitable business insurance.
Control
Reduce fraud, errors and unauthorized access with internal controls.
Document
Use contracts, policies, records and written procedures.
Secure
Protect passwords, systems, customer data and business information.
Recover
Build backups and continuity plans before an emergency occurs.
See how the major layers of small business protection work together.
Small business protection requires more than reacting after something goes wrong. Identify the risks, transfer appropriate exposure through insurance, strengthen internal controls, document important relationships and procedures, secure business systems and prepare the company to recover from disruptions.
Small business protection should cover more than physical property.
Small business protection should address lawsuits, employee mistakes, cyber incidents, fraud, broken agreements, poor documentation and operational interruptions.
Insurance Risk
Review insurance based on the actual activities and exposures of the business.
- General liability
- Property coverage
- Workers’ compensation
- Commercial auto
- Professional liability
- Cyber coverage
Contract Risk
Important business relationships should not depend entirely on verbal expectations.
- Customer agreements
- Vendor agreements
- Payment terms
- Scope of work
- Cancellation terms
- Ownership and responsibility
Cybersecurity Risk
Protect access to financial systems, email, customer data and business applications.
- Unique passwords
- Multi-factor authentication
- Password management
- Device updates
- Backups
- Access removal
Fraud & Cash-Control Risk
No single employee or owner should rely only on memory to protect business funds.
- Bank reconciliations
- Approval limits
- Vendor review
- Restricted system access
- Cash-handling controls
- Transaction monitoring
Compliance Risk
Keep recurring registrations, filings and business obligations on a documented schedule.
- Licenses and permits
- Tax filings
- Sales tax
- Payroll filings
- Annual reports
- Industry requirements
Recordkeeping Risk
A business may know what happened but still have difficulty proving it without organized records.
- Receipts
- Contracts
- Payroll records
- Tax records
- Insurance policies
- Business correspondence
Internal controls strengthen small business protection.
Internal controls are a practical part of small business protection. They reduce mistakes, create accountability and make unusual transactions easier to identify without assuming employees are dishonest.
Reconcile Every Account
Compare accounting records with bank and credit-card activity regularly.
Use Approval Limits
Define who can authorize purchases, refunds and payments.
Limit System Permissions
Give employees only the access required for their role.
Verify Changes
Confirm unusual banking or payment-instruction changes independently.
Separate Duties
When practical, avoid having one person control every part of a cash process.
Review Financial Reports
Look for unexpected trends, balances and transaction patterns.
Remove Access Promptly
Close access to email, software and financial systems when roles change.
Write the Process Down
Document the normal process so exceptions become easier to identify.
Small business protection includes a plan for keeping operations moving.
A continuity plan strengthens small business protection by asking how the company would keep operating after a cyberattack, equipment failure, severe weather, loss of a key employee or another unexpected interruption.
The plan does not need to predict every emergency. It should identify what is essential, where backups are located and who knows how to keep critical operations moving.
The Marvelous Money Move
The cheapest time to build a control is before the loss. Protect the cash, passwords, contracts and records while everything is working normally—not after the first serious problem.
Small business protection connects to the rest of the business.
Bookkeeping & Accounting
Accurate records and reconciliations help identify financial problems earlier.
Explore Bookkeeping →Check Cash & Financial Ratios →
Business Security Tools
Improve password management, software access and business security practices.
Explore Security Technology →Business Systems
Document procedures and reduce owner-dependent operations.
Explore Operations →Business Resource Center
Continue through the Start, Fund, Manage, Grow, Protect and Invest roadmap.
Continue the Roadmap →Common questions about small business protection.
What insurance does a small business need?
Insurance is one layer of small business protection, and needs vary by industry, employees, property, vehicles, professional services and other exposures. Review coverage with a qualified insurance professional familiar with the specific business.
Why should a small business use written contracts?
Written agreements can clarify scope, payment terms, responsibilities, deadlines and what happens when expectations change.
What is an internal control?
An internal control is a process designed to reduce errors, protect assets, improve accountability or make unusual activity easier to detect.
How can a small business reduce fraud risk?
Common steps include regular reconciliations, restricted access, approval limits, vendor verification, transaction review and separation of duties when practical.
What cybersecurity steps should a small business take?
Common protections include unique passwords, multi-factor authentication, password management, software updates, backups and controlled employee access.
What is a business continuity plan?
A continuity plan identifies how essential business operations can continue or recover after a major interruption.
Small business protection works best before something goes wrong.
Review the financial controls, business systems, documentation and operating risks before they become expensive problems.