A family member of mine will be setting up a small business in the tech sector. He is going to be moving people over to cloud services at a more affordable rate compared to say Microsoft or Google. I know security is very important for businesses like this. What precautions would you give to someone starting up this kind of business when it comes to cyber security?
Start with a firm understanding of CSPs. This includes thins like encryption, access, and general hard security measures. Have a system that monitors your cloud system 24/7 and does automatic reports. Test back-ups and then test them again. For cases of data sensitivity, make sure the business is compliment with GDPR, SOC 2, or HIPAA.
I agree about having automatic monitors for your cloud system running. Back-ups are a given. If someone is running a business in 2025 without back-ups, they are just asking to get attacked!
As for the businesses that your family member may take on, offer special back-up options for them. You can charge extra for something like this, all the big companies do.