15-minute security checkup

1. Do email and banking logins use two-step sign-in (a code or app, not just a password)?

2. Are important files backed up automatically, with a copy that is offline or cannot be changed?

3. Do computers, phones and the website install security updates automatically?

4. Must any change to a supplier's bank details be confirmed by phone, using a number you already had?

5. Does everyone use a password manager, with different passwords for each account?

6. Does each person have their own login (no shared accounts)?

7. When someone leaves, are their accounts and access removed the same day?

8. Are SPF, DKIM and DMARC set up on your email domain?

9. Is the office Wi-Fi password strong, with a separate network for guests?

10. Do staff use everyday accounts that are not administrators on their computers?

11. Do all computers have up-to-date security software (e.g. Microsoft Defender) switched on?

12. Have staff been shown, in the last year, how to spot scam calls, messages and emails?

13. Is the business phone number protected with a SIM-swap PIN at the network?

14. Do you know who to call and what to do first if you are hacked?

15. Do you know what customer personal data you hold and who can see it?