Firewall Protection
Do all your computers and servers have firewall protection turned on?
Yes
No
Unsure
N/A
Firewall Rules Kept Tight
Do you regularly review what is allowed through your firewall (and remove anything you don’t need)?
Yes
No
Unsure
N/A
Confidence in Security
Do you feel confident your business is protected from common cyber threats?
Yes
No
Unsure
N/A
Staff Training
Has anyone in your company had cyber security training recently?
Yes
No
Unsure
N/A
Reporting Suspicious Emails
Do your staff know what to do if they receive a suspicious email?
Yes
No
Unsure
N/A
Strong, Unique Passwords
Do your staff use strong, unique passwords for work accounts?
Yes
No
Unsure
N/A
Default Passwords Changed
Have default passwords been changed on your internet router, Wi‑Fi, devices, and any key systems?
Yes
No
Unsure
N/A
Extra Login Protection (MFA)
Do you use an extra security step when logging in (like a code on your phone)?
Yes
No
Unsure
N/A
Admin Accounts Kept Separate
Do you keep admin (high power) accounts separate from everyday user accounts?
Yes
No
Unsure
N/A
Starting/Leaving Access Process
Do you have a process for removing access when someone leaves the company?
Yes
No
Unsure
N/A
Access Limited to What’s Needed
Do people only have access to the data and systems they actually need for their job?
Yes
No
Unsure
N/A
No Shared Logins
Are shared accounts used across the business (one login used by multiple people)?
Yes
No
Unsure
N/A
Automatic Updates
Are all your computers and devices kept up to date automatically?
Yes
No
Unsure
N/A
Important Updates Applied Quickly
When important security updates are released, are they applied quickly (within a couple of weeks)?
Yes
No
Unsure
N/A
Supported Systems Only
Are all your computers and servers on supported versions (not old/out of support)?
Yes
No
Unsure
N/A
Apps Kept Up to Date
Are your main apps updated regularly (and old software removed)?
Yes
No
Unsure
N/A
Control Over Installing Software
Are staff allowed to install their own apps or software?
Yes
No
Unsure
N/A
Security Software Installed
Do you have antivirus or security software on all work devices (including servers)?
Yes
No
Unsure
N/A
Security Being Watched
Do you know if your antivirus is actively monitored, or is it just installed?
Yes
No
Unsure
N/A
Real-Time Protection On
Is your antivirus protection always on (and not easy for users to turn off)?
Yes
No
Unsure
N/A
Security Updates Automatic
Is your security software kept up to date automatically?
Yes
No
Unsure
N/A
Coverage for Remote Devices
Are devices used at home or remotely covered by the same protection?
Yes
No
Unsure
N/A
Scams Being Reported
Have you had any suspicious emails or scams reported lately?
Yes
No
Unsure
N/A
Spotting Scam Emails
Do staff know how to spot a scam or phishing email?
Yes
No
Unsure
N/A
If Someone Clicks a Bad Link
Do staff have a process to follow if they accidentally click on a suspicious link?
Yes
No
Unsure
N/A
Where Important Data Lives
Is your important business data stored securely?
Yes
No
Unsure
N/A
Backups in Place
Is your data regularly backed up?
Yes
No
Unsure
N/A
Backups Can Be Restored
Do you know how quickly you could recover your data if something went wrong?
Yes
No
Unsure
N/A
Remote Working
Do staff work from home or on the move?
Yes
No
Unsure
N/A
Personal Devices Used for Work
Are personal devices used for work (email, files, systems)?
Yes
No
Unsure
N/A
Remote Access Protected
Are remote devices and remote access secured?
Yes
No
Unsure
N/A
Plan for When Things Go Wrong
Do you have a plan if something goes wrong (like a hacked account or ransomware)?
Yes
No
Unsure
N/A
Incident Response Plan
Do you have an incident response plan in place should you have a cyber incident?
Yes
No
Unsure
N/A
Plan Has Been Tested
Have you ever tested your response plan (even as a simple discussion)?
Yes
No
Unsure
N/A
External Access to Systems
Do any external companies have access to your systems or data?
Yes
No
Unsure
N/A
Checking Suppliers’ Security
Do you check a supplier’s security before giving them access?
Yes
No
Unsure
N/A
Security Standards Goal
Are you aiming to meet any standards like Cyber Essentials or ISO 27001?
Yes
No
Unsure
N/A