Resources

Security Checklist

Eight practical checks worth running against your own business today.

Multi-factor authentication (MFA)

Enabled on email, Microsoft 365, and any system holding sensitive data, the single biggest reduction in account-takeover risk.

Antivirus & endpoint protection

Installed, centrally managed, and actually kept up to date, not just present on the day it was installed.

Patching & updates

Operating systems and software updated promptly, not left running months behind on security patches.

Backups tested, not just taken

A backup that has never been restored is a hope, not a plan. Test restores periodically.

Access reviewed regularly

Leavers removed promptly, and access matched to role, not accumulated over years.

Staff know how to spot phishing

Basic awareness training so your team is a defence, not the weakest link.

Firewall configured properly

Default rules reviewed, not left as whatever shipped with the hardware.

A written incident response plan

Knowing who does what in the first hour of a breach matters far more than figuring it out live.

Not sure how you'd score against this list?

Get in touch and we'll run through it with you, honestly.