Check your business basics
Download the checklist (PDF) ↓
- MFA everywhere - Email, banking and cloud apps require a second factor. No exceptions.
- Patches on autopilot - Every device installs security updates automatically.
- Protection on every endpoint - Antivirus/EDR installed and active on all computers.
- Backups you can actually restore - Three copies, two media types, one offsite; tested quarterly.
- Staff know the phish - Everyone can spot a phishing email; test them twice a year.
- One password manager - No reused passwords, no sticky notes.
- Guest Wi-Fi is separate - Visitors never touch the business network.
- Ex-employees lose access day one - Accounts disabled the day someone leaves.
- A one-page incident plan - Who to call and what to shut down, written before you need it.
- Laptops are encrypted - A stolen laptop shouldn't mean a data breach.
- No unsupported software - If the vendor stopped patching it, it goes.
- An annual review - Threats change; your defenses get checked once a year.
Need help with any of these? That's literally what we do - book a free consultation →