Free IT health check

1Is multi-factor authentication switched on for everyone's email and Microsoft 365 or Google accounts?

2Do staff use everyday accounts without administrator rights on their computers?

3When someone leaves, is their access to every system removed on their last day?

4Do staff use a password manager, or a unique password for every work account?

5Are computers and phones updated within 14 days of security updates being released?

6Does every computer have business antivirus or endpoint protection that someone keeps an eye on?

7Are all computers running an operating system that still gets security updates?

8Are laptops encrypted, with BitLocker on Windows or FileVault on Mac?

9Is incoming email scanned for phishing, impersonation and harmful attachments?

10Is your email domain protected against spoofing, with SPF, DKIM and DMARC set up?

11Is your important data backed up, including Microsoft 365 or Google email and files?

12Is at least one backup copy kept separate from your main systems, off-site or in the cloud?

13Have you successfully restored something from a backup in the last 6 months?

14Do you have a business-grade firewall that is kept up to date?

15Is guest Wi-Fi kept separate from the network your staff and systems use?

16Do people working remotely connect securely, without remote desktop opened directly to the internet?

17Have staff had cyber security or phishing awareness training in the last 12 months?

18Do you know what you would do, and who you would call, if you were hacked or hit by ransomware?

19Do you know where your personal and sensitive data is stored, and who can access it?

20Do you have cyber insurance, or know what security measures your insurer expects?