Security is a habit with a date on it. Print this, tick it on the first of the month, sign it.
The fifteen minutes
1. Updates installed on the billing PC, phones and router (2 min). 2. Restore one file from the backup (3 min). 3. Bank and UPI statements skimmed for unknown debits (3 min). 4. Access review: anyone who left still has a login? (2 min). 5. E-mail forwarding rules and connected apps checked (2 min). 6. App permissions on the owner's phone (2 min). 7. One-line reminder to staff: no OTP, no scan to receive, call back on official numbers (1 min).
Quarterly extras
Phishing quiz with the team; router firmware and guest password; the self-assessment on this desk; the incident plan's contact list checked.
Checklist
- ☐Updates
- ☐Backup restore test
- ☐Statements reviewed
- ☐Access review
- ☐Mail rules / connected apps
- ☐Owner phone permissions
- ☐Staff reminder sent
- ☐Signed: ______ Date: ______