Security readiness worksheet
Know where you stand.
A practical conversation, not a security score.
For each prompt, mark yes / no / unknown, the person responsible, and the next action. An unknown is a useful finding. This checklist does not assess compliance, certify security, or replace a risk assessment. Do not send passwords, recovery codes, incident evidence, or confidential records through a sales inquiry.
Find the security questions that do not have an owner yet. This is a conversation starter, not an audit.
Know what matters
-
Can someone name the systems and data the business depends on most?
-
Which are they?
-
Who owns security decisions and the budget for gaps?
-
Is there a current list of devices, apps, admin accounts, and outside providers?
Protect daily access
-
Multi-factor sign-in is in place for:
-
New accounts approved and departing users removed through a repeatable process?
-
Devices and software updated through a defined routine?
-
Any unsupported or end-of-life systems still in use?
-
Staff know how to report a suspicious message?
Prepare for disruption
-
Someone knows what is backed up, how it is protected, and what is not covered?
-
A restore has been tested for a critical workflow?
-
When was it last tested?
-
Written first-response path for a suspected incident?
-
Vendor and insurance contacts available outside the affected systems?
Decide the next three actions
-
Action 1
-
Action 2
-
Action 3
Your answers stay in this browser only; nothing is sent to WOLFTRAXX SYSTEMS. When you are ready, start a conversation and bring the printed sheet.
Decide the next three actions
Choose one ownership gap, one technical gap, and one recovery or response gap. For each, record the owner, a due date, and what evidence would show it is done. You can talk through your priorities with WOLFTRAXX SYSTEMS or explore cybersecurity services; any assessment or ongoing service needs separately agreed scope.
This original checklist is organized around small-business risk-management themes in the NIST Cybersecurity Framework 2.0 Small Business Quick Start Guide and CISA small-business resources. It does not reproduce another MSP’s checklist or imply NIST/CISA endorsement.