September 15, 2026 · by David Gilbert · 4 min read · Cyber Security
A meaningful share of the small business clients I work with are genuinely solo operators — just one person doing everything, including, often, whatever security gets done at all. Most published cyber security advice quietly assumes a team, a dedicated budget, sometimes even dedicated IT staff. Here's what actually matters when you're genuinely the only person in the business.
Why Solo Operators Are Often More Exposed, Not Less
No second person to catch a mistake before it becomes a real problem, no one to notice if something's behaving strangely while you're genuinely focused on the actual work in front of you, and often a tendency to assume "I'm too small to be a worthwhile target," which simply isn't reliably true — automated, large-scale scams don't meaningfully discriminate by business size at all, and a solo operator's financial details and accounts are just as genuinely usable to a scammer as a large company's.
The Single Most Important Thing for a Solo Operator
A password manager plus multi-factor authentication, full stop, before anything else on any list. With no second person to catch an error, the absolute basics carrying the most weight, by a clear margin, because there's no safety net behind you catching a mistake the way a colleague occasionally might in a larger team.
Building Your Own "Second Person" Habits
Since there's no actual second person, you need a few specific personal habits acting as your own internal check instead. A short pause before any payment or sensitive action, deliberately, every single time, asking "would I do this if someone else were watching me right now, or am I rushing this through purely because nobody else is here to slow me down." A genuinely set time, weekly or monthly, to actually review accounts and look for anything unusual, rather than relying purely on noticing something by sheer accident in passing.
Backups Matter Even More When You're Solo
If you lose access to your own systems with no team to lean on while you sort it out, the entire business genuinely stops, completely, immediately, with nobody else able to keep things moving in the meantime. Solid, properly tested backups aren't a nice-to-have for a solo operator. They're closer to existential, because there's no one else to fall back on if something genuinely goes wrong.
The Limited-Budget Reality, Handled Honestly
Most solo operators genuinely can't justify the cost of dedicated security tools built and priced for larger businesses, and that's a completely fair, real constraint, not a personal failing on anyone's part. The good news, genuinely: the highest-impact protections — password manager, multi-factor authentication, tested backups, healthy independent-verification habits — are mostly free or very low cost. The expensive tools matter most for larger, more complex environments that a solo operator usually doesn't have in the first place.
What I'd Actually Prioritise, In Order, on a Tight Solo Budget
- Password manager and multi-factor authentication everywhere it's available — genuinely free or very close to it.
- Tested, working backups — low cost, and the single most important thing standing between you and a genuinely existential, business-ending problem.
- A personal habit of independent verification before anything involving money or access changes hands — entirely free, costs only a moment of deliberate discipline each time.
- Basic software updates, switched to automatic wherever realistically possible — free, and easy to quietly neglect when you're the only one responsible for remembering it.
The Honest Reassurance Worth Hearing
You don't need an enterprise security budget to be genuinely well protected as a solo operator. You need the right handful of basics, done consistently, every single time, without exception — which is exactly the same advice I'd give a larger business, just considerably more achievable on a genuinely tight solo budget than the more elaborate tools and frameworks built primarily for bigger, more complex teams.