Cybersecurity Self-Assessment Checklist

• Multi-factor authentication is on for email and every administrative account.
• A password manager is in use and work passwords are not reused.
• Laptops and phones use full-disk encryption and automatic screen lock.
• Operating systems and browsers install updates automatically.
• Backups run automatically and a restore has been tested in the last year.
• You can list every application that stores customer or employee data.
• Accounts are removed the same day someone leaves.
• Administrator rights are limited to people who need them.
• Employees have completed security awareness training in the last year.
• There is a written way to report a suspected incident.
• Someone by name owns security decisions.
• You know which vendors hold your data.

Progress is saved in this browser only. It is not a compliance record.

Earn a Certificate of Training Completion

Complete every section, acknowledge, and pass the knowledge check.

This certificate recognizes completion of educational training material only. It is not a professional certification, accreditation, license, compliance assessment, audit result, or attestation of compliance with any law, regulation, or contract requirement. ComplianceAnvil is not a certification authority, accreditation body, assessor, or law firm.

Put this into practice

Resources tell you what good looks like. A Program Pack does the work with you — generated documentation, tracked controls, training, and evidence in one workspace.