A practical checklist for SMBs: 3-2-1 backup, MFA, network segmentation, anti-phishing training, and incident response plans ...