Identity Security

☐ MFA is enforced for all privileged users.

☐ Former employees are removed immediately.

☐ We regularly review who has access to sensitive systems.

Visibility

☐ We have a complete inventory of our IT assets.

☐ We know where sensitive data lives.

☐ We continuously identify security exposures.

Ransomware Protection

☐ We can recover critical systems quickly.

☐ Active Directory is protected and monitored.

☐ Backups are regularly tested.

Data Security

☐ Sensitive information is encrypted.

☐ Access to confidential data follows least-privilege principles.

☐ We monitor unusual data access.

Threat Detection

☐ Security alerts are reviewed daily.

☐ Threat intelligence informs our security decisions.

☐ We have an incident response plan.