Check your IT in five questions.
Backups, sign-ins, updates, lost laptops and support. You get a score out of 100 and the fixes worth doing first, in about two minutes.
IT health check
What each question checks.
Each question maps to a control in the Canadian Centre for Cyber Security’s baseline cyber security controls for small and medium organizations. The full baseline goes further, from security software to secure websites. These five are quick to check and quick to act on.
Backups
We ask: How are your company files backed up?
A backup only helps if it restores. Automatic, versioned copies, one of them kept offsite and a restore tested on a schedule, let you recover from a failed drive, a deleted folder or ransomware.
Multi-factor authentication
We ask: Do staff use multi-factor authentication for email and remote access?
With a second step at sign-in, such as an app prompt or a security key, a stolen password on its own is no longer enough to get into email or remote access.
Updates and patching
We ask: How are computers and servers kept up to date?
Updates fix security flaws once they are known. Turning them on is half the job; the other half is confirming they installed on every machine.
Device encryption
We ask: If a laptop were lost tomorrow, what happens to the data on it?
Laptops and phones go missing. Full-disk encryption keeps the data on them unreadable, and remote wipe lets you erase a device that does not come back.
Support
We ask: When something breaks, who fixes it?
When something breaks, the first delay is working out who will fix it. Agree on who to call, and how fast they respond, before you need them.
