Cybersecurity baseline

Prepare a security conversation

Use these review topics to identify the environment, current concerns and areas that need attention.

Prepare the conversation

Topics to discuss

Important accounts use unique credentials and stronger authentication where available.

Operating systems, applications, plugins, devices and exposed services have a defined update process.

Important data has recoverable backups and the restore process is understood or tested.

Users, administrators, service accounts and applications have only the access they need.

Internet-facing systems, remote access paths, domains, devices and key software are known.

Devices have appropriate protection, safe configuration and a response path for suspicious activity.

Important systems retain useful logs or alerts so unusual activity can be investigated.

There is a simple plan for isolating affected systems, preserving evidence, restoring service and contacting the right people.

Use WhatsApp, phone or email to discuss these topics and agree the next step. Keep passwords, API keys and recovery codes out of your message.