Know which security questions to ask

What you will review

• Multifactor authentication (MFA), which adds a sign in check beyond a password, and administrator access.
• Device protection and encryption.
• Email safeguards and backup coverage.
• Access reviews and vendor responsibilities.
• Incident contacts, policies, and technology evidence for insurance questions.

Allow about 30 minutes with your technical contact. The checklist identifies questions and gaps. It is not certification, a complete risk assessment, or a substitute for qualified security or audit work.