Cybersecurity

Protect accounts, prepare for disruption and make sure your business can recover its information.

Could you recover if one account or device failed?

Begin with the systems you cannot operate without. Assign owners, turn on multi-factor authentication and test a recovery process. A completed checklist is useful evidence of work done, but it is not proof that a business is secure.

Protect email, administrator and finance accounts first.
Keep a secure recovery route that does not depend on one phone.
Back up business data separately and test a restore.
Write a short incident contact and decision plan.

Account security checklistCreate a prioritised action plan from eight practical controls.Open tool

Decisions in this topic

CybersecurityRoll out MFA without locking the business outProtect important accounts while planning administrator recovery, staff changes and exceptions.CybersecurityWhat staff should do after a suspicious email or loginGive the team a clear reporting path and an incident checklist before someone needs it.CybersecurityRemove staff access without losing business recordsCoordinate people, accounts, devices and data so offboarding is timely and recoverable.CybersecurityCloud synchronisation is useful, but is it your backup?Check recovery points, deletion behaviour and independent access instead of relying on a backup label.CybersecurityHow to test a backup without disrupting normal workRestore into a safe location, measure the full recovery process and check the result with a business user.CybersecurityWrite a technology continuity plan people can usePlan critical work, decision authority and practical fallbacks before trying to recover every system at once.

Start with one decision you can test. Keep a written record of the assumptions, the person responsible and the date you will review the result. Follow our starting path if you need an overview first.