Computer and Network Security Checklist

I have a backup

Do you want a backup solution ?

I take my backup off-site

A recent copy of my backup is always kept offsite

My backup runs automatically

My backup works and has been tested

The backup meets my business legal data retention requirements, I.e., 7 year

All my email is backed up. I can recover individual deleted email messages

Do you know what a disaster recovery plan is?

Do you want a disaster recovery plan?

I have disaster recovery plan

I have a plan to replace my computer equipment including laptops desktops, servers and network equipment

I have a plan to recover my data

I have a plan to recover my Line Of Business software and systems e.g. MYOB

I have a copy or can easily obtain a copy of all my program installation software

I know how long I can afford to be off line and out of action

I am satisfied with the amount of data I can lose between last backup and disaster

I have a plan to recover my telephone system. I will not miss out on phone calls

I use Office 365 for hosted Exchange Server

My email system never goes down

My e-mail is backed up.

I have effective SPAM filtering. Only occasional spam emails get through

Viruses do not reach my email inbox. They are blocked before hitting my computer and network

I can recover individually deleted email messages

My antivirus software works and is regularly updated and checked

All my computers have antivirus protection

The firewall protects me from malicious attack

My computers cannot access dangerous websites that can cause harm

I am protected from ransom ware attacks

My Wifi network is secure and has strong passwords

Guest Wifi users can access the internet only and have no access my equipment

I have internet website filtering – no computer can access unwanted websites

When working remotely my computers remain secure from the internet

When staff leave my business I can prevent them from accessing all systems

I have a strong password policy enforced

My laptop hard disk is encrypted so if it is lost or stolen, the data remains safe

Do you have a server

Data access on my server is restricted to staff and what is needed by their role

I have clean power. Power surges and sudden outages will not damage my servers and essential network equipment. I use a UPS on essential equipment

My servers hard disks can break without me losing access to services running or data on the server

My server continues to operate when its power connection dies

My server sends alerts of potential problems, before they arise

My server sends alerts when components break

I have a UPS

My UPS is regularly tested

My UPS gracefully shuts down my server before its power cuts out

I have secure "As Built" or configuration documentation on all my systems