IT SECURITY
CHECKLIST
A comprehensive 15-point security checklist aligned with Cyber Essentials standards. Download instantly and assess your business IT security posture against industry best practices.
What's in the checklist?
15 essential security controls for every UK business
Strong Password Policies
Minimum 12 characters, complex requirements, regular changes, no password reuse
Multi-Factor Authentication (MFA)
Enforce MFA on all user accounts — email, Microsoft 365, VPN, admin portals
Network Segmentation
Separate networks for guest Wi-Fi, sensitive systems, and critical infrastructure
Regular Security Updates
Automatic patching, OS updates, application patches, firmware updates within 30 days
Email Security & Filtering
SPF/DKIM/DMARC records, phishing filters, malware scanning, attachment blocking
Endpoint Protection
Antivirus, anti-malware, EDR (endpoint detection & response) on all computers
Data Backups
3-2-1 rule: 3 copies, 2 media types, 1 offsite. Tested monthly recovery drills
Access Control & Role-Based Permissions
Principle of least privilege, regular access reviews, disable inactive accounts
GDPR & Compliance Section
The guide also includes a dedicated GDPR and data protection compliance section:
Next Steps After the Checklist
Assess Your Position
Score your business against each control — identify gaps
Prioritize Remediation
Fix critical gaps first, then work through medium and low priorities
Implement Controls
Deploy missing controls — we can help with implementation & training
Pursue Certification
Many gaps align with Cyber Essentials — certification proves compliance
Need Help Implementing?
Coreitech helps UK businesses implement these security controls and pursue Cyber Essentials certification. Call us for a free assessment.
Free Security Assessment