10-Point IT Health Audit

1. Is Multi-Factor Authentication (2FA) enforced on all company email and remote access accounts?

YES NO

2. Do systems automatically require password changes every 90 days for all employees?

YES NO

3. Has your team completed cybersecurity awareness training within the last 6 months?

YES NO

4. Is your data backed up automatically at least once per day—both locally and to the cloud?

YES NO

5. Have you successfully tested a full backup restore within the last 30 days?

YES NO

6. If your office burned down tonight, could your entire team be working remotely by tomorrow morning?

YES NO

7. Do you have a live, up-to-date inventory of every computer and device accessing your network?

YES NO

8. Are security updates and patches installed on all machines within 48 hours of release?

YES NO

9. Do you know exactly how much 1 hour of server downtime costs your business in lost revenue?

YES NO

10. When a critical issue happens, is it resolved in under 60 minutes?

YES NO

10-POINT IT AUDIT