Is multi-factor authentication enabled for email and administrator accounts?
List your email and administrator accounts, check MFA coverage, and prioritise any accounts that are missing it.
SECURITY READINESS
Five questions.
A useful next step.
A quick starting point for your team. Your answers stay in this browser tab and are not saved or sent.
ABOUT 2 MINUTES
Where do you stand?
Choose “Not sure” where you need to check. This is a planning aid, not a security assessment or certification.
Help me choose a service ↗Further reading: CISA’s everyday security guidance and backup and incident preparation.
Enable JavaScript for personalised next steps, or use these five prompts with your team.
Have you successfully restored important data from a backup recently?
Choose one important dataset and arrange a controlled restore test with its owner. Record what worked and how long recovery took.
Does someone own security updates and track overdue fixes?
Assign an owner, list the systems in use, and review overdue security updates with the people responsible for them.
Does your team know how to report a suspicious message or activity?
Give your team a clear reporting contact and practise with a simple suspicious-message scenario.
Do you have an incident plan with named contacts and recovery priorities?
Write down who coordinates a response, who can authorise changes, and which services need to recover first. Walk through a short scenario together.
YOUR NEXT STEPS
Start with what needs attention.
Your selections are not included in the contact form.