Security Baseline
A practical starting point for reducing common business risk across identity, endpoints, email, networks and recovery.
Identity first
Use MFA where supported, remove stale accounts, separate administrator roles and limit privileges to what people actually need.
Keep endpoints current
Maintain operating systems and commonly exploited applications on a defined patch cadence. Unsupported systems need an explicit replacement or isolation plan.
Protect email and collaboration
Use appropriate filtering, anti-phishing controls, DMARC/SPF/DKIM where relevant, and a clear process for reporting suspicious messages.
Know your network boundaries
Review internet-facing services, firewall rules, remote access, guest networks and segmentation between users, servers and connected devices.
Make alerts actionable
EDR, SIEM or other tools do not help if nobody owns the alert. Define who receives alerts, who investigates and what actions are authorized.
Prove recovery
Know what is backed up, how long it is retained and whether important data or systems can actually be restored.
Use the guide as a conversation starter
Use the checklist to identify questions worth answering before a change, assessment or provider conversation.
Need help applying this to your environment?
If the checklist exposes gaps, we can help prioritize what should be fixed first and what can wait.