Do you require strong, unique passwords for all systems and accounts (including enforcing multi-factor authentication where available)? *

Are all systems and software regularly updated and patched to fix known vulnerabilities? *

Do employees receive regular cybersecurity awareness training (e.g., phishing, social engineering, safe browsing)? *

Is there a clear incident response plan in case of a cyberattack or data breach?

Are critical data and systems backed up regularly? *