Is your company protected? A 25-point security and backup checklist.

Backup

1. Important data is backed up automatically every day
2. There is a copy outside the company (cloud)
3. A restore has been tested in the last 3 months
4. The backup can’t be accessed from regular computers
5. Microsoft 365 email and files are backed up too

Access and passwords

6. Each person has their own user account, with no shared accounts
7. Email and business systems use two-factor authentication
8. Accounts of people who leave the company are disabled the same day
9. No one uses an administrator account for day-to-day work
10. Passwords are kept in a password manager, not on paper or in Excel

Computers

11. All computers receive system updates automatically
12. All have modern, monitored antivirus
13. Laptops have encrypted disks
14. There is an inventory showing who uses each device
15. No unlicensed or unknown software is installed

Email and fraud

16. There is filtering for spam, malicious links and attachments
17. The team knows how to spot fraud by email and WhatsApp
18. Payment requests and bank account changes are confirmed by phone
19. The email domain has anti-spoofing protections (SPF, DKIM, DMARC)
20. There was a phishing simulation in the last year

Network and personal data

21. Guest Wi-Fi is separate from the company network
22. The router and firewall have strong passwords and up-to-date firmware
23. There is a list of the personal data processed and who has access to it
24. There is a procedure for responding to an incident
25. The privacy notice is published and up to date

25 points. Want us to do this assessment with you? The IT Health Check is free.