A practical business security checklist with free tools for quick evidence and next steps.
Use this checklist to review accounts, passwords, MFA, phishing, backups, DNS, SSL, email security and Cyber Essentials readiness. Each section links to a free MDS tool and a relevant MDS service when help is needed.
How to use this business security checklist
This page is designed as a practical SEO landing page and a working checklist. Start with account security, then check email and domain security, backup readiness, staff awareness and device support. Use the free tools to collect quick results and contact MDS where a fix needs deeper technical work.
For many businesses, the biggest security gains come from sensible basics: MFA, strong passwords, patched devices, secure Microsoft 365 settings, tested backups and staff who can recognise phishing attempts.
Business security checklist tools
Each card links to a free tool that supports the checklist item.
1. Check password strength
Review whether passwords are long, unique and resistant to common guessing patterns.
Open Password Strength Checker2. Generate stronger passwords
Create stronger passwords for admin accounts, shared systems and emergency use.
Open Password Generator3. Complete a cyber risk check
Identify gaps across devices, users, backups, email and access controls.
Open Cyber Risk Assessment4. Validate SPF and DKIM
Check email authentication records used to reduce spoofing and delivery problems.
Open SPF / DKIM Validator5. Review DNS and DMARC
Check MX, SPF, DKIM, DMARC and related records for domain security.
Open DNS / DMARC Checker6. Check backup readiness
Review coverage, restore testing and ransomware recovery preparation.
Open Backup Readiness Checker7. Check suspicious URLs
Review links before staff enter credentials or payment details.
Open URL Safety Checker8. Train phishing awareness
Use simulated examples to teach warning signs and safer user behaviour.
Open Phishing Simulator9. Review Cyber Essentials
Check readiness for common security controls expected by customers and insurers.
Open Cyber Essentials CheckerRelated MDS services
MDS can help complete the checklist and fix the gaps found by the tools.
Cyber Security Support
Review MFA, users, devices, email security, backups and policies.
View cyber security servicesCloud Services
Microsoft 365, cloud backup, shared files and secure access support.
View cloud servicesNetwork Solutions
DNS, domains, Wi-Fi, cabling, firewalls and business network support.
View network solutionsRelated blog posts
Future article placeholders to build topical authority around business security.
Business security checklist for SMEs
A future long-form article can expand this checklist into a downloadable guide.
View MDS blogMicrosoft 365 security settings to review
Use this future article to link MFA, admin accounts and phishing protection.
View articlesBackup testing guide for small businesses
Connect backup readiness content to cloud and recovery services.
View blog postsBusiness security checklist FAQ
What should a business security checklist include?
It should include MFA, passwords, backups, devices, email security, DNS records, staff awareness, access control and incident planning.
How often should a business review security?
Review lightly every month or quarter, and deeply after major staff, system, office or supplier changes.
Can free tools help with a checklist?
Yes. Free tools can highlight useful checks such as passwords, URL safety, backup readiness, DNS and email security.
Can MDS complete a business security review?
Yes. MDS can review Microsoft 365, devices, backups, email security, policies, users and Cyber Essentials readiness.
Need help completing the checklist?
MDS can review your setup and help prioritise the most important fixes.