Security

  Multi-factor authentication (MFA) is enabled on all business accounts.

  Passwords are strong, unique and not shared between systems.

  Any former employees have had their accounts removed.

  Antivirus and security software are up to date.

Devices

  Laptops and mobile devices are protected with passwords or biometrics.

  Important devices won’t be left unattended in vehicles or public places.

  Software updates have been installed on key business devices.

  If you’re travelling abroad, check you’ll still be able to access your business systems, email and applications from your destination.

Data & Backups

  Critical business data is backed up.

  Backup systems have been checked recently.

  Important files are stored securely rather than only on individual devices.

Email & Cyber Awareness

  Staff know who to contact if they receive a suspicious email.

  Out-of-office messages don’t contain sensitive information.

  Teams are aware that cyber criminals often target businesses during holiday periods.

Business Continuity

  Key contacts and suppliers are documented.

  Someone knows who to contact if an IT issue arises while you’re away.

  Emergency support arrangements are in place.