IT Security Readiness Checklist

This checklist is designed to help New Zealand businesses assess and strengthen their IT security posture. Use it during quarterly reviews or after any major system change.

🔐 Network Security

• Are firewalls properly configured and maintained?
• Is there a process for regular patching of network devices?
• Are intrusion detection/prevention systems in place?

🛡️ Endpoint Protection

• Do all endpoints have up-to-date antivirus and anti-malware?
• Is device encryption enabled on all mobile and portable devices?
• Is there a process for managing personal devices (BYOD)?

🔑 Access Control

• Are strong password policies enforced?
• Is Multi-Factor Authentication (MFA) implemented for key systems?
• Are user accounts reviewed and deprovisioned promptly?

📁 Data Protection

• Is sensitive data encrypted at rest and in transit?
• Are regular backups taken and tested?
• Is data retention and disposal handled according to policy?

🚨 Incident Response

• Is there a documented and tested incident response plan?
• Do employees know how to report a security issue?
• Is cyber insurance in place and reviewed annually?