Cybersecurity Checklist: 15 Steps to Protect Your Business Online

Cybersecurity doesn't need to be complicated — it needs to be consistent. Here's a checklist to work through once, then revisit quarterly.

Accounts & Access

1. Use unique, strong passwords everywhere. 2. Enable 2FA on every account that offers it. 3. Review who has admin access and remove anyone who no longer needs it. 4. Use a password manager across your team.

Website

5. Keep your CMS, plugins, and themes updated. 6. Install an SSL certificate. 7. Use a web application firewall. 8. Run regular malware scans.

Email

9. Set up SPF, DKIM, and DMARC records. 10. Train your team to recognize phishing. 11. Be cautious with unexpected attachments and links.

Data

12. Back up your website and database on an automated schedule. 13. Follow the 3-2-1 backup rule. 14. Test your backups periodically.

Ongoing

15. Review this checklist quarterly — security isn't a one-time task, it's a habit.

Further Reading

• SSL Certificates
• Talk to Our Security Team
• Get Cyber Safe – Government of Canada