23 Oct 2026

News

7 Simple Cybersecurity Habits for Small Offices in Bhutan

Most cyber incidents in small offices don’t start with a sophisticated hacker. They start with an everyday habit: a shared password, a router that was never updated, or a link clicked in a hurry. The good news is that a few simple routines go a long way. Here are seven practical security habits any Bhutanese business, school or office can put in place this month.

1. Use strong, separate passwords and turn on two-step verification

Reusing one password across email, banking and social media means one leak opens every door. Give each important account its own long passphrase, store them in a reputable password manager, and switch on two-step verification (a code by SMS or an authenticator app) wherever it is offered, especially for email and your business Facebook Page.

2. Keep devices and software updated

Updates for Windows, Android, browsers and office software often close security holes that attackers already know about. Turn on automatic updates on laptops and phones, and don’t keep putting off that “restart to update” prompt for weeks.

3. Don’t forget the router and Wi-Fi

The office router is the front door to your network, yet it is often left with its factory password. Change the admin password, use WPA2 or WPA3 encryption with a strong Wi-Fi key, update the router firmware, and create a separate guest network so visitors never share the same network as your accounts and files.

4. Pause before you click

Phishing messages are designed to create urgency: an “unpaid invoice”, a “locked account” or a prize. Check the sender’s address, hover over links before clicking, and confirm unusual payment requests by phone with someone you know. A quick call is far cheaper than a wrong transfer.

5. Give people only the access they need

Not every staff member needs admin rights on every computer or every shared folder. Use standard user accounts for daily work, keep admin accounts for IT tasks, and remove access promptly when someone leaves the organisation or changes role.

6. Protect laptops and phones that leave the office

Set a screen lock with a PIN or password on every device, enable device encryption where available, and turn on “find my device” so a lost phone or laptop can be locked or wiped remotely. Be careful with public Wi-Fi for sensitive work.

7. Write down a simple “what if” plan

Decide in advance who to call and what to do if an account is hacked or a computer gets infected: disconnect it from the network, change the affected passwords, and restore from a clean backup. A one-page plan everyone knows about is better than a perfect plan nobody can find.

Security is a habit, not a one-time purchase

None of these steps require a big budget. What they do require is consistency and a well-designed network underneath. eDruk Private Limited has been building technology in Bhutan since 2004, and our team has hands-on experience with network design, structured cabling, equipment configuration and network operation and maintenance.

Let’s make your network safer

Want a second pair of eyes on your office network, Wi-Fi setup or day-to-day security practices? Talk to eDruk.