Just a reading tip:
I was glad to learn that Protonmail has published “The ProtonMail Guide to IT Security for Small Businesses” https://protonmail.com/it-security-complete-guide-for-businesses .
I’ve read parts of it, and it seems really useful also for civil society. I starts with basic IT security before moving on to encryption tools etc. I particularly enjoyed that they, a tech company, start the final chapter of the book with stating:
“Merely switching to encrypted services will not solve all of your IT security issues. The previous four chapters that describe how to implement IT security best practices form the foundation of a sound IT