Multi-factor authentication: protect the most important accounts first
Review authentication methods, starting with administrators, email and remote access.

Three Checks to Start With
Your selections are stored only in this page's memory and will be cleared on refresh. Ticking an item does not mean a security audit has been completed.
Open fillable checklist ↗Record owners, deadlines and evidence, then download to continue offline or print.
Reference sources
CISA ↗This is an introductory planning checklist. Before making changes, the responsible person should confirm the environment, compatibility and recovery arrangements. Refer to official documentation for detailed steps.