Cyber security basics for small businesses using AI

You read a headline about AI finding software flaws faster than people can fix them. You run a coaching practice with a website, a booking tool and an AI assistant connected to your inbox. You ask ChatGPT whether you should be worried, and get this:

Example of a typical reply: Cyber security is important for every business. Make sure you use strong passwords, keep your software up to date and stay vigilant against threats.

It isn't wrong. It just doesn't tell you what to do on Monday. Good cyber security for small business owners is mostly unglamorous upkeep. Keep things updated, lock down your accounts, know what your AI tools can reach, and agree a few rules with anyone who helps you.

How is AI changing cyber security for small businesses?

The UK National Cyber Security Centre has published an assessment, Impact of AI on cyber threat from now to 2027. It judges that AI will almost certainly help attackers exploit known vulnerabilities, increasing attacks against systems that have not been updated with security fixes. It also says the gap between a flaw being made public and attackers using it is already short, and that AI will almost certainly shorten it further.

That sounds alarming, but read it carefully. Its judgement on known flaws is mainly about systems that have not been updated. The same assessment says AI will also help people defend their systems, though it expects many systems not to keep pace. For a small business, the practical point is calm and simple: the window for "I'll update it later" is getting smaller.

It also points to something newer. AI tools are increasingly connected to company systems and data, and the NCSC says that connection is itself something attackers will try to exploit. If you have plugged an assistant into your email or your files, that is now part of what you need to look after.

Why the generic answer doesn't help

The reply at the top fails for the same reason most AI answers fail. It knows nothing about your business, so it gives the advice that fits everyone. It cannot tell you which of your accounts matter most, which plugins you forgot about, or which assistant can read your client folder.

You can fix that, but the fix is mostly in your own hands, not in a better prompt.

Most attacks are basic. Lock the doors you already have.

The upkeep that does most of the work

The NCSC's Small organisations guide to cyber security is written for people without a technical background, and it is the best place to start. Here is how its advice maps onto a typical coaching or consulting business.

Keep the website, CMS and plugins updated

The NCSC's page on protecting your devices says updates fix bugs that criminals could use, and recommends setting apps to update automatically and deleting software you no longer use. The same thinking applies to your website. Your content management system, its theme and every plugin are software, and each one needs updating.

If someone else built or hosts your site, ask them plainly who applies updates and how often. If the answer is vague, that is your answer. Remove plugins you no longer use rather than leaving them switched off.

Watch the security notices for what you rely on

Many of the services you rely on, from your website platform to your booking tool, publish security or release notices when they fix a problem. You don't need to read them all. Pick the handful of services your business would struggle without and sign up for their update or security emails, so a fix doesn't sit waiting for you to notice.

Use strong passwords and two-step verification

The NCSC's guidance on securing your important online accounts recommends passkeys where a service offers them. Where it doesn't, use a strong password you don't use anywhere else, plus two-step verification (2SV), often called two-factor authentication. It calls turning on 2SV one of the most effective ways to protect accounts that still use passwords.

Start with the accounts that would hurt most to lose: email, banking, your website and its hosting, online storage and social media. The same page also suggests removing accounts for people who no longer need access.

What can your AI tools actually reach?

This is the step most people have never done. Make a short list of every AI tool you use and, next to each, write what it is connected to. Your inbox, your calendar, your cloud drive, your CRM, your social accounts.

Then ask, for each one, whether it needs that access to do the job you use it for. An assistant that drafts social posts does not need your client folder. If it can read everything, it can be tricked into misusing what it can reach. Disconnect what you don't use, and where a tool offers read-only access, prefer it.

Here is the difference between a vague request and a useful one when you ask AI to help with this.

Before:

Is my business secure?

After:

I run a small coaching business. I use an AI assistant connected to my email and calendar, a note-taking tool connected to my cloud drive, and a scheduling tool connected to my calendar. List the questions I should ask about each connection to decide whether it needs that access. Don't give me general security advice.

And an example of the kind of reply the second prompt can produce, written to show the difference rather than taken from a real model run:

Example only: For the email assistant, does it need to send email or only draft it? Can you limit it to certain folders? For the note-taking tool, which folders in your drive can it read, and does it include client notes it doesn't need?

The second answer gives you something to check. It still can't check it for you.

Set clear rules for anyone who helps you

If you have a VA, an associate or a small team, the weakest point is usually not the software. It is that nobody has said what is allowed. Agree, in writing, which AI tools are approved, what client information must never go into them, who can connect a new tool to a business account, and who to tell if something looks wrong.

The NCSC guide makes the same point in its own way: don't leave cyber security with a single person, because it is everyone's business.

What these steps won't stop

None of this makes you untouchable. A determined, skilled attacker, or a flaw nobody knows about yet, can still get through a well-kept system. A supplier you rely on can be breached without you doing anything wrong.

These steps also won't catch every scam. A convincing email that persuades someone to pay a fake invoice gets past updates and passwords alike. The NCSC guide covers spotting scams and backing up your data, and both are worth reading next.

What these steps do is take you out of the easy pile. The NCSC's Cyber Essentials page describes most attacks as basic, like a thief trying your front door to see if it is unlocked. Locking the door won't stop everyone. It makes most of their attempts much harder.

One thing to do today

Open the settings of the AI tool you use most and look for its connected apps or integrations. Write down everything it can reach, and disconnect one thing it doesn't need.

If you work with other people, the AI use policy course helps you turn those decisions into rules your team will actually follow.