Security Best Practices for Business Accounts

Keep your Business Account secure with these best practices.

Access Management

Limit Owners

• Keep Owner count to 1-2 people
• Only assign to trusted individuals
• Review ownership regularly

Use Appropriate Roles

• Most employees should be Members
• Use Admin role sparingly
• Only Owners can assign Owner role

Regular Audits

• Review member list regularly
• Remove access when employees leave
• Update roles as needed

Account Security

Strong Passwords

• Use unique, strong passwords
• Enable two-factor authentication
• Don't share passwords

Domain Verification

• Use official company domains
• Verify domain ownership
• Keep domain information current

Authority Declaration

• Only authorised personnel should create accounts
• Verify authority before creating
• Report unauthorised accounts

Data Protection

Access Controls

• Limit access to necessary personnel
• Use roles appropriately
• Review permissions regularly

Regular Backups

• Export important data regularly
• Keep backups secure
• Test restoration process

Best Practices

1. Regular Reviews: Audit members and access monthly
2. Prompt Removal: Remove access immediately when employees leave
3. Role Management: Use least privilege principle
4. Documentation: Keep records of access changes
5. Training: Educate team on security practices

Incident Response

If you suspect unauthorised access:

1. Review account activity
2. Remove suspicious access
3. Change passwords
4. Contact Refer2u support
5. Document the incident

Compliance

• Follow company security policies
• Meet industry compliance requirements
• Keep audit trails
• Document access decisions