08 / Topic hub
Operational privacy and security guides for small businesses, WordPress teams, website owners, and people responsible for data handling.
Security and privacy are connected but distinct. Security controls reduce unauthorized access and disruption; privacy work governs what information is collected, used, shared, retained, and deleted. Both require owners, evidence, and tested procedures.
Start with the small-business baseline, apply the WordPress checklist where relevant, then map public disclosures to an operational retention schedule.
Guides in this hub
Read in sequence or enter at the problem you need to solve. Each guide links to the most useful prerequisite and next step.
Build a practical small-business cybersecurity baseline for accounts, devices, backups, vendors, logging, response, and recovery using CISA and NIST guidance.
Use this WordPress security checklist to control updates, accounts, plugins, backups, permissions, monitoring, and incident recovery with clear evidence.
Map website data practices before drafting a privacy policy, including collection, purposes, vendors, cookies, retention, rights, security, and updates.
Create an operational data retention policy with record categories, triggers, periods, holds, backup handling, deletion methods, owners, and review evidence.