Family Security Playbook Most money lost by small offices goes out through one payment
Not a movie-style hack: a vendor's "new bank details", a gift-card text from "the boss", a payroll change by email. A written plan and a few money rules stop most of it, and tell everyone exactly who to call when something does go wrong.
Who decides, who calls
Your incident lead, backup, IT helper and spokesperson, with the bank's fraud line, your insurer and your attorney on page one.
Six situations, one page each
A fake invoice, a hijacked email account, locked files, a lost laptop, a gift-card request from "the boss", and exposed member or donor records.
Ready for your insurance application
A page listing what cyber insurers commonly ask about, whether your plan has it, and the proof to keep. It helps you answer honestly; it can't promise coverage.
Money rules that stop most losses
Call-back checks before payment changes, two-person approval and bank alerts, with a to-do list for any you don't have yet.
How it works
- Check where you standThe free Small Office Security Checkup: 20 plain questions, a score and a fix list. Its results code carries into your playbook, so the rules you already follow are ticked.
- Build it in 30 minutesName your incident lead, backup, IT helper and spokesperson, add your bank, insurer and attorney, and pick your money rules.
- Print two copiesOne for the office and one kept away from the computers. Walk your team through page one.
- Practice onceRun the free office scam drill at a staff meeting and keep the signed training sheet with your records.
One price, one organization
Small Office Security Playbook
once · one organization · a year of edits and reprints
- Built in about 30 minutes in your browser
- Names and phone numbers only, never passwords
- For churches, nonprofits, HOA boards and small businesses
Free with it, or on its own
- Small Office Security Checkup: 20 questions drawn from the themes of CISA's Cybersecurity Performance Goals, with a one-page report for your board or owner
- Office scam drill: six scripted calls for a staff meeting, with a training sign-in sheet
Have an IT provider or repair shop you trust? Providers on the full toolkit can set up your office playbook with you, under their name.
Secure checkout by Stripe. Your link arrives by email as soon as payment goes through. Sales tax is added where it applies.
Questions
Who is it for?
Any small organization with a few people who handle email, money or records: a church office, a nonprofit, an HOA board, a dental office or a family business. Bigger organizations with an IT department usually need a fuller incident response plan; we can help with that too.
Do we have to enter passwords or account numbers?
No. The playbook holds names and phone numbers only, and it never prints passwords, PINs or account numbers. Everything you type stays in your browser; we only check that your purchase is valid.
What are the six situations?
A fake invoice or a changed payment request, an email account taken over, files locked or a ransom note on screen, a lost or stolen laptop or phone, an urgent gift-card request from "the boss", and member, donor or customer information exposed. Each has its own page: how you'll know, what to do now, what to do next, and what not to do.
Can we update it?
Yes. For a year you can edit and reprint as often as you like. Save your answers file, and next year you can update the plan in minutes.
Does it include the checkup results?
If you took the free checkup, enter its results code when you start: the money rules you already follow are ticked, and every other gap goes on a "still to fix" page in your plan.
Can our insurer or auditor see it?
It's yours to share. Insurers often ask whether you have a written incident plan and whether staff are trained to spot payment fraud; the playbook and the drill's signed training sheet help you answer both.
We give playbooks to our members, too. Is that a different plan?
Yes: community plans give each of your members, residents or customers their own family playbook, with your name on it.
Write the plan before the bad day
About 30 minutes, $149, a year of edits and reprints.