Sal Talash: Website security basics for a small business: HTTPS, updates, backups and who holds the keys
Most small-business owners think about website security only after something goes wrong: a defaced homepage, a contact form sending spam, or a call from someone who no longer has the password and no longer answers the phone. By then, the fix is expensive. The good news is that the basics are short, and most of them are about decisions, not code. Disclosure: I founded UOVA , an AI website builder and creative studio in Toronto, so I have a stake in the website market. Nothing here depends on which platform you use. It draws on guidance from the Government of Canada's Cyber Centre and Get Cyber Safe, and on documentation from Google and Let's Encrypt, all read on October 1, 2026. Start from the official list The Canadian Centre for Cyber Security publishes "Baseline cyber security controls for small and medium organizations." It names thirteen controls, from "Develop an Incident Response Plan" to "Secure Portable Media." Several apply directly to ...