Audit Areas & Key Questions

$1.$ Network Security

$$ Is the network using strong encryption?

$$ Are there any open ports that might be unnecessary or unsecured?

$$ Are default credentials being used?

$2.$ Device Security

$$ Do devices have up$-$to$-$date antivirus and firewalls enabled?

$$ Are all users following best practices for admin permissions?

$$ Are any devices missing regular updates?

$3.$ Password Practices

$$ Are passwords strong and unique?

$$ Is there evidence of shared or reused passwords?

$$ Would $2$FA improve security for any users?

$4.$ Data Backup

$$ Are critical data backups scheduled regularly?

$$ Is there an offsite or cloud backup to ensure data availability?

$$ Is sensitive data on shared drives protected?