Do you protect your business accounts with Multi-Factor Authentication?

For example, email, Microsoft 365/Google Workspace, banking and other critical accounts.

Are your employees trained to spot cyber threats?

Think phishing emails, suspicious links, social engineering and reporting incidents.

Could you recover your important data after an attack?

Consider whether critical data is backed up, protected and regularly tested for recovery.

Would you know what to do after a cyber attack?

Do you have a documented response plan, clear responsibilities and a way to report an incident?

Do you check the cyber security of your suppliers?

Think about suppliers who access your systems, data or provide critical services.

When was your cyber risk last reviewed?

Consider whether you've formally identified your biggest cyber risks and what you're doing about them.