Check your IT in five questions.

Backups, sign-ins, updates, lost laptops and support. You get a score out of 100 and the fixes worth doing first, in about two minutes.

IT health check

Question 1 of 5: How are your company files backed up?

What each question checks.

Each question maps to a control in the Canadian Centre for Cyber Security’s baseline cyber security controls for small and medium organizations. The full baseline goes further, from security software to secure websites. These five are quick to check and quick to act on.

  • Backups

    Cyber Centre control BC.7: Backup and encrypt data

    We ask: How are your company files backed up?

    A backup only helps if it restores. Automatic, versioned copies, one of them kept offsite and a restore tested on a schedule, let you recover from a failed drive, a deleted folder or ransomware.

  • Multi-factor authentication

    Cyber Centre control BC.5: Use strong user authentication

    We ask: Do staff use multi-factor authentication for email and remote access?

    With a second step at sign-in, such as an app prompt or a security key, a stolen password on its own is no longer enough to get into email or remote access.

  • Updates and patching

    Cyber Centre control BC.2: Automatically patch operating systems and applications

    We ask: How are computers and servers kept up to date?

    Updates fix security flaws once they are known. Turning them on is half the job; the other half is confirming they installed on every machine.

  • Device encryption

    Cyber Centre control BC.8: Secure mobility

    We ask: If a laptop were lost tomorrow, what happens to the data on it?

    Laptops and phones go missing. Full-disk encryption keeps the data on them unreadable, and remote wipe lets you erase a device that does not come back.

  • Support

    Cyber Centre control BC.1: Develop an incident response plan

    We ask: When something breaks, who fixes it?

    When something breaks, the first delay is working out who will fix it. Agree on who to call, and how fast they respond, before you need them.

Then work through the full checklist.

The security checklist for small businesses has 12 checks on one page, written for whoever looks after IT in your office. Tick what is already in place, then print it or save it as a PDF.

What the checklist covers

  • Backups2 checks
  • Accounts3 checks
  • Devices3 checks
  • Network1 check
  • People1 check
  • Plan2 checks