This module guides you through the essentials of patch management, identifying fake update malware, and applying the Principle of Least Privilege to employee accounts. You'll understand the differences between admin and standard user accounts, learn to configure antivirus and anti-malware solutions, and explore vulnerability management in practice. Keep your software updated — it is the single most effective technical defense available to a small business.

In this module, you'll discover effective data backup strategies using the 3-2-1 rule, learn how to evaluate third-party vendors for security risks, and secure payment processing workflows. We'll cover disaster recovery basics, third-party risk management, and secure payment practices for merchants — including an introduction to Payment Card Industry Data Security Standard (PCI-DSS) as an example of how industry standards shape payment security obligations. Set up a regular backup schedule as a first step before completing this module.

This cumulative assessment tests your knowledge across all three content modules: The Fortress Walls, The Immune System, and The Supply Chain. Completing it successfully demonstrates readiness to progress to Course 3 — Human Factors and Incident Response in Cybersecurity.