Spotting internal fraud

This is one where unfortunately I can speak from experience. There are some normally honest people who will rip you off out of opportunity, and some broken people who scam you because if they can you deserve it or will do so because they beleive their own bullshit and thus think they are entitled to what ever they can take.

TWO FACTOR AUTHENTICATION

This seems like a hassle but it really isn't compared to the pain of being compromised. Simply put it's too easy for your login details for your critical business systems to be compromised but if you have 2FA enabled on your Xero Account, Office 365 or Client Database then as long as the kackers aren't holding a knife to your throat they aren't going to get in.

USB drives are great for silently spreading an infection. * Scan yours between sites * if you don't use them in your business then block their use * NEVER PLUGIN A FOUND DRIVE! It's been done in the wild in Aussie: https://www.bbc.com/news/technology-37431335

Defense in depth

7 Essential layers for your businesses IT security - affordable for young dynamic businesses looking to scale.

Spam filtering
Next Gen Firewall
Web Filtering
AV & Antimalware
OS & Application updates
Staff education
an Effective BC/DR plan.