Cybersecurity basics for shops
Trade businesses get phished and ransomed too. The basics block 90% of the threats.
Unique passwords plus a manager
1Password or Bitwarden for the team. Cost is trivial. Shared and reused passwords are the most common breach vector for small businesses.
Two-factor on everything that has a 'log in'
Email, bank, accounting, CRM, payroll. No exceptions. Two-factor is 30 seconds of setup and prevents most account takeovers.
Train the team on phishing
One 15-minute training on common scams (fake invoices, 'CEO asking for gift cards', wire transfer fraud) saves shops six figures regularly.
Take your version of this question further
This is one operator-tested angle on the question. Your shop, your size, your trade, and your team change the answer. Ask your specific version inside Ask a Shop Owner to get a response grounded in how owners like you actually handled it.