Printable checklist

Business Cybersecurity Checklist

A practical checklist for reviewing business accounts, email security, cloud access, and incident readiness.

Account Security

  • Multi-factor authentication enabled
  • Admin accounts separated from normal user accounts
  • Strong password manager used
  • Old staff accounts removed
  • Recovery emails and phone numbers reviewed

Email & Phishing Protection

  • SPF, DKIM, and DMARC reviewed
  • Staff trained to identify phishing attempts
  • Suspicious payment changes verified through a second channel
  • Shared inbox permissions reviewed
  • Email forwarding rules checked

Cloud & File Access

  • Public file sharing reviewed
  • Admin permissions limited
  • Sensitive folders access-controlled
  • External sharing monitored
  • Backup access confirmed

Website & Admin Panels

  • Admin login pages protected
  • CMS and plugins updated
  • SSL enabled
  • Unused accounts removed
  • Backups tested

Incident Readiness

  • Key contacts documented
  • Account recovery steps known
  • Backups available
  • Logs preserved during suspicious activity
  • Incident response responsibilities assigned

Want Blackpine to review this with you?

Use the checklist as a starting point, then request a practical assessment for environment-specific findings and priorities.

Request a Security Assessment