Use evidence rather than a score
Check each statement against your environment. Mark it only when you can identify the record, setting or result that supports it. The checklist stays in your browser and is not submitted to us.
The result is a list of topics to review. It does not estimate the chance of an incident or prove compliance with a framework.
Choose the next step
Start with an essential account the business cannot recover, important records with no known restore process or access that should have been removed. Give the task an owner and decide how to verify the result.
If you want help, describe the gap rather than sending credentials. A scoped support job can confirm the environment and identify a practical action.
Keep the check current
Review these questions when the team, software or devices change. Record the maintenance responsibilities in a place the business controls. A checklist completed once does not replace ongoing access and recovery work.
What counts as evidence?
For account ownership, identify the business account controlling the service and the available recovery method. For a backup, identify the records covered and a restore result. For the website form, use a safe test and confirm where it arrived.
A supplier invoice or a green status icon may be a useful starting point, but it does not answer every question about ownership or recovery. If you cannot verify the statement, leave it unchecked and record what needs to be confirmed.
Turn an unknown into a task
Write down the affected service, the person responsible and the evidence you need. A task might be to ask the current website supplier for the hosting account owner, or to agree on a test restore of an important folder. Keep credentials in an appropriate protected store rather than in the action list.
You can use the remaining topics to prepare an enquiry. Tell us which statements you could not verify and what the business relies on. We can discuss an investigation or review without needing your passwords in the first message.
Use the checklist after a change
A new employee, replacement laptop or move to a different application can change the result. Review the relevant statements and retain the evidence with the business. Do the same when a supplier leaves or recovery details change.
The check works best as a record of questions and follow up work. It does not turn eight checked boxes into an assessment of every device, account or security requirement.
Common questions
Does this certify our IT?
No. This is a self check to help identify questions and priorities. A formal assessment needs a defined scope, method and evidence.
Are my checklist answers sent anywhere?
No. The check uses the current browser page state and does not submit the answers to us. You can choose to describe any gaps in a separate enquiry.
What happens when I leave the page?
This version does not save your checked answers for a later visit. Keep your own action notes if you want a record of the questions to follow up.
Should I check something a supplier says is covered?
Check it when you can identify the evidence supporting the statement. If the details are unclear, leave it unchecked and ask the supplier to confirm the arrangement.
Reviewed