Guide · Cybersecurity checklist for small business
Cybersecurity Risk Checklist for Los Angeles Businesses
Use this cybersecurity checklist to see how exposed your small business is. Answer yes or no to each item: multi-factor authentication on every account, security software on every computer, updates installed, email filtering, tested backups, staff training, a plan for incidents, and control over who has access. Every no is a gap worth fixing, starting with accounts and backups. The full checklist is below, free, with no form required.
Guide · From SupportMax in West Los Angeles
Start here
1
MFA on every account?
2
Backups tested recently?
3
A plan if something happens?
Questions? 310.331.8119 · Mon–Fri, 9–6 Pacific.
Plain-English help
Free, no form needed
No fear tactics
One accountable team
Checklist, part 1
Accounts, devices, email, and backups
Answer yes or no. Be honest; nobody is grading this.
01
Accounts
Every email and Microsoft 365 account uses multi-factor authentication, and former staff accounts are disabled.
02
Devices
Every computer has managed security software, and updates install automatically.
03
Email is filtered for phishing and malicious attachments before it reaches staff.
04
Backups
Important data is backed up, a copy is kept separate, and a restore has been tested.
How to use it
How to use this checklist
Fifteen minutes with whoever knows your systems.
Request a Security Review1. Answer every item
If you don't know the answer, mark it no. Not knowing is a gap too.
2. Start with the basics
Fix accounts and backups first. They protect against the most common, most damaging problems.
3. Recheck regularly
Run through it again whenever staff, systems, or vendors change.
Checklist, part 2
People, response, and outside access
The gaps that are easiest to overlook.
People
Your team
Staff trained to spot phishing
New hires trained when they start
A clear way to report suspicious email
Admin rights only where needed
Response
If something happens
You know who to call
Insurer and contacts written down
Backups can be restored
Someone watches for threats
Outside access
Vendors and devices
You know which vendors can sign in
Old vendor access removed
Firewall managed and updated
Personal devices covered by a policy
This checklist follows widely recommended basics. CISA's cyber guidance for small businesses and its Secure Our World program explain each step in more detail.
How exposed is your business?
Answer 12 quick questions about logins, email, devices, backups and IT oversight. It takes about 3 minutes. You'll see your results right away, and we'll email you a copy.
Your results are ready
Tell us where to send them. We'll show your full results here and email you a copy.
The form didn't load. Please contact us or call 310.331.8119 and we'll go through your results with you.
This is a quick self-check based on your answers. It isn't an audit, a security test, or a compliance determination.
Next steps
If you answered no
Most small businesses have a few gaps, and that is normal. Start with multi-factor authentication and tested backups, then work through the rest. If you would like someone to check it properly, a cybersecurity assessment reviews your settings, runs a vulnerability scan, and gives you a written plan ranked by business risk. For a broader look at your IT, start with a free IT assessment.
Cybersecurity services →How we help
How SupportMax helps close the gaps
01
Cybersecurity assessment
A professional review of your settings, with a written plan.
02
Account and email security
MFA, Microsoft 365 security settings, and email filtering.
03
Devices and monitoring
Managed endpoint protection and 24/7 threat monitoring.
04
Backups and response
Tested backups and incident response help during business hours.
From our clients
We wanted to know how exposed we really were.
“We had a sense that our security needed work but no clear picture of where we stood. SupportMax helped us see the gaps.”
Alina Emberbrook - Owner, Professional Services
They gave us a clear picture of our risk.
“SupportMax walked through our environment and gave us a practical view of what to fix first. It wasn't overwhelming.”
Mara Pinevale - Operations Director, Retail
We know what to fix first.
“We finally have a prioritized list of what matters. That clarity has made the whole process easier to approach.”
Isla Brightstone - Managing Partner, Legal Services
Printable version
Get the checklist as a printable PDF
A printable two-page version: this checklist plus a page for your key contacts and a plan for the gaps you find. Work through it with your team.
Get the free Cybersecurity Risk Checklist: a printable checklist and gap plan for your team.
Working with SupportMax
One accountable team, clear next steps
Want help reading your results?
Call 310.331.8119, Monday–Friday, 9:00 a.m.–6:00 p.m. Pacific, and we will talk it through.
Questions
Cybersecurity checklist for small business: common questions
Have a question that isn't here? Call 310.331.8119 or schedule a free consultation.
What should a small business cybersecurity checklist include?
Accounts and MFA, device security and updates, email filtering, tested backups, staff training, an incident plan, and control over vendor access.
Which items matter most?
Multi-factor authentication and tested backups. They protect against the most common and most damaging problems.
How often should we review it?
Whenever staff, systems, or vendors change, and at least once a year.
Is a checklist enough?
It is a good start. A professional assessment checks settings you can't easily see and ranks gaps by business risk.
Can I download this checklist?
A downloadable version is being prepared. Everything in it is on this page now.
Does SupportMax fix the gaps?
Yes. After an assessment, we can quote the work to close the gaps you choose to fix.
Find out where you stand
Call 310.331.8119, Monday–Friday, 9:00 a.m.–6:00 p.m. Pacific, or request a security review.
Prefer to call? 310.331.8119 · Mon–Fri, 9–6