CYBERSECURITY ESSENTIALS CHECKLIST Use this as a quick review of the core cyber habits that reduce risk. 1. Password basics - Are passwords long and unique for each account? - Are passwords stored in a password manager instead of written down? - Are shared accounts avoided where possible? 2. Multi-factor authentication (MFA) - Is MFA enabled for email, banking, cloud, and admin accounts? - Are staff trained to approve only legitimate login prompts? 3. Email security - Are staff checking the sender, domain, and urgency of unexpected messages? - Are links and attachments verified before clicking? - Is suspicious mail reported quickly? 4. Device protection - Are devices updated regularly? - Are antivirus and endpoint protections active and current? - Are company devices protected from unknown USB or external media? 5. Access control - Are staff granted only the access they need? - Are former employees removed from admin roles promptly? - Do we review access permissions regularly? 6. Backups and recovery - Are critical files backed up and encrypted if needed? - Have we tested restoring data in the last year? - Do we know who is responsible for recovery after an incident? 7. Internet and Wi‑Fi safety - Is our Wi‑Fi using secure settings and a strong password? - Are guest networks separated from business devices? - Are routers updated and maintained? 8. Business continuity - Do we have a plan for ransomware, lockouts, or internet outages? - Do staff know what to do if a suspicious email or login issue appears? - Is there a clear communication process in an incident? 9. Risk awareness - Have we reviewed the main business risks in plain language? - Are staff aware of what to do if they click something suspicious? - Are new risks reviewed when the business changes or grows? 10. Review and action - Which 3 improvements create the biggest reduction in risk? - Who owns each action item? - When will the plan be reviewed again? Even basic cyber hygiene can reduce risk significantly. A short review of these items often reveals the easiest wins first.