Digital Security Checklist for Small Businesses

A quick guide to spot the most common digital risks in small businesses. Check each item as you verify it. The unchecked ones are exactly where Deepwave can help.

Print / Save as PDF

1. Domain and DNS

• You know where your domain is registered and when it expires
• The domain has auto-renewal enabled
• Access to the DNS panel is protected with a strong password and 2FA

2. Professional email

• The company uses email on its own domain (not @gmail/@hotmail)
• SPF is configured
• DKIM is configured
• DMARC is configured
• Your emails don’t land in recipients’ spam

3. Passwords and authentication

• No one reuses the same password across services
• The company uses a password manager
• Two-factor authentication (2FA) is enabled on critical accounts
• Former employees have their access revoked

4. Backup

• Important data is backed up
• The backup is automatic and frequent
• The backup has been tested (restore actually works)
• There is a copy stored off-site

5. Website and forms

• The website uses HTTPS (valid padlock)
• The website and its plugins are up to date
• Forms have spam/bot protection
• No old, abandoned pages or systems are exposed

6. Scams and phishing

• The team can recognize suspicious emails and messages
• There is a clear procedure to confirm payments and invoices
• No one clicks links or attachments without verifying the source
• The company doesn’t treat WhatsApp as an official process system

7. Processes

• Critical repetitive tasks don’t depend on a single person
• Sensitive spreadsheets have access control
• There are logs of what happens in important systems