Small Business Cybersecurity Checklist

A good starting checklist doesn't need to cover everything — it needs to cover the handful of areas most likely to matter for a small business: identity and access, email security, device security, backups, and basic policies.

For each area, the goal is a simple, honest answer: Is MFA turned on everywhere it should be? Are backups actually tested? Do former employees still have access to anything? Is there a written policy for how devices and data should be handled?

Answering these questions honestly is often the fastest way to see where a business actually stands, before diving into a more formal assessment.