The Small Law Firm Cybersecurity Playbook — Chula Vista Edition 🌴⚖️

TL;DR: 8 Quick Wins (do these first) ⏱️

1. Encrypt every laptop with BitLocker. 🔐
   

2. Use a password manager, not a spreadsheet. 🗝️➡️📦
   

3. Change default admin logins on printers and routers. 🖨️🛜
   

4. Turn on MFA for email, practice management, and bank. ✅📲
   

5. Back up with 3-2-1 and test a restore. 💾🔁
   

6. Patch monthly (Windows, Office, browsers, Adobe). 🧩
   

7. Harden Wi-Fi: WPA3/WPA2-AES, WPS off, guest network. 📶🛡️
   

8. Keep a 2-page incident plan everyone can find. 📃🆘

Plain-English How-Tos (fast wins) 🛠️

• BitLocker in 3 clicks: Start → Manage BitLocker → Turn on → save the recovery key. 🔐
  

• Password managers > Excel: One master passphrase, shared vaults for firm accounts, MFA on the manager itself. 🧠📚
  

• Router & printers: Log in → change admin password, update firmware, disable WPS/Wi-Fi Direct, set Guest Wi-Fi. 🛠️🖨️
  

• 3-2-1 backups: 3 copies, 2 media types, 1 off-site/offline; run a test restore monthly. 💾🏦
  

Why this matters to small firms 🎯

• These basics (encryption, MFA, patching) block most small-firm incidents. 🧱
  

• Written routines = evidence of due care if anyone ever asks. 🧾
  

The real magic is boring consistency—a monthly checklist, done. 📆✅

Downloadable, Copy-Paste SOPs 📥

Each SOP has: Before You Start (prep), Step-by-Step, Done-Right Checklist, When to Call ToroTek, and a contact block. Easy to train, easy to audit.

• 📄 SOP A — New-Hire IT Setup (10–20 min)

  
  

  
  

• 📄 SOP B — Employee Off-boarding (15–30 min)

  
  

  
  

• 📄 SOP C — Monthly Security Checklist (30–60 min)
  

  
  
  

• 📄 SOP D — Lost/Stolen Device: 5-Step Rapid Response
  

  
  
  

• 📄 SOP E — “Is This Phishing?” Quick Triage
  

• 📄 SOP F — Router & Printer Hardening (Quarterly)
  

“Do-This-Week” Mini-Plan 🗂️

• Day 1: Turn on BitLocker + save recovery keys. 🔐

• Day 2: Roll out the password manager + MFA. 🗝️📲

• Day 3: Patch devices + quick backup restore test. 🧩💾

• Day 4: Router & printer hardening (WPS off, new admin creds). 🛜🖨️

• Day 5: Print your 2-page incident plan and show staff where it lives. 📃📍

Done-for-You Options from ToroTek 🤝

• Free year of automated patching + monthly reports (limited local slots). 🆓🧩
  

• Password manager rollout & training (shared vaults, MFA, onboarding). 🎓
  

• Full-disk encryption & backup setup (plus restore drill). 🔐💾
  

• Router/Printer hardening & Wi-Fi tune-up (guest network, WPS off). 🛠️📶
  

• Custom “Oh-No” Incident Plan for your practice areas. 🆘📘
  
  

Hablamos español.
📞 Call/Text: 619-376-6995
✉️ Email: info@toro-tek.com
🌐 Web: torotekllc.com