The free 1-page cybersecurity checklist for small organisations
Most attacks on small businesses and non-profits succeed because of a handful of basics. This checklist covers the ten that matter most, in plain language, on one page you can print and work through with your team.
Written by the volunteer cybersecurity specialists of MaaSec, a non-profit association from Maastricht, the Netherlands, helping small organisations everywhere.
What’s on the checklist
- 01
Passwords and a password manager
A different, long password for every account, kept in a password manager.
- 02
Two-factor authentication everywhere
Turn on 2FA for email, banking, social media and your website's admin.
- 03
Backups you have tested
Automatic backups, one copy offline, and a restore you have actually tried.
- 04
Updates switched on
Computers, phones, routers and software update themselves, quickly.
- 05
Phishing awareness
Everyone knows the warning signs and who to tell about a strange email.
- 06
Fewer admin accounts
Admin rights only for the people who need them, used only when needed.
- 07
Secure Wi-Fi
WPA2 or WPA3, a strong password, and a separate network for guests.
- 08
Website updates
Your CMS, plugins and themes are current, and unused ones are removed.
- 09
Incident contacts
A short list of who to call if something goes wrong, kept offline.
- 10
Offboarding
When someone leaves, their access leaves with them, on their last day.
Run an organisation with a website? Get a free AI pentest of your website.