The best way to protect a small business from cyberattacks is to turn on multi-factor authentication, use a password manager, keep software updated, back up your data, train employees to spot phishing, and limit who can access what. Most of these steps are free or low-cost, and you can complete them in a few weeks.