1
Is multi-factor authentication enabled for important business accounts?
MFA should protect email, Microsoft 365, Google Workspace, accounting systems and administrator accounts.
CYBERSECURITY ESSENTIALS CHECKLIST
How secure is your business?
Answer twelve practical questions to review your accounts, devices, email, backups, access controls and incident readiness.
Identity security
Device protection
Backup readiness
0 of 12 answered0%
2
Are administrator accounts separated from normal daily user accounts?
Employees should not use highly privileged administrator access for everyday work.
3
Are all business devices protected by managed endpoint security?
Business laptops and computers should have active antivirus, EDR or other endpoint protection.
4
Are operating systems and business applications updated regularly?
Security updates should be installed promptly to reduce exposure to known vulnerabilities.
5
Is device encryption enabled on business laptops and computers?
Encryption helps protect business data if a device is lost or stolen.
6
Are important business systems and cloud data backed up?
Backups should cover important files, email, cloud platforms and other critical business information.
7
Are backups monitored and tested to confirm data can be restored?
A backup should not be considered reliable until recovery has been tested.
8
Does your business have controls to reduce phishing and email impersonation?
This may include email filtering, SPF, DKIM, DMARC, staff awareness and suspicious-message reporting.
9
Are user accounts and permissions reviewed regularly?
Former employees, contractors and unnecessary access should be removed promptly.
10
Do employees complete cybersecurity awareness training?
Staff should understand phishing, password security, suspicious links and how to report incidents.
11
Does your business have a documented process for responding to a cyber incident?
Employees should know who to contact and what to do if an account, device or business system is compromised.
12
Are important systems, accounts and security alerts monitored?
Monitoring helps identify suspicious activity before it becomes a larger business incident.
Please answer all questions to calculate your security score.