Not checked
Technician check: Which important accounts still rely on a password alone?
Official Australian Government guidance ↗Small Business Cyber Security Hub
Small Business Cyber Security Checklist for Sole Traders & New Businesses
Use this practical baseline checklist yourself, or work through it with a Your IT & Tech Mates technician during an on-site business visit.
Based on public Australian Signals Directorate and Australian Cyber Security Centre guidance. This is a practical baseline review, not a formal Essential Eight assessment, certification, legal advice or insurance advice.
On-site review
Public checklistTechnician review details
Technician name is entered on site. Business name is optional. No customer email, phone number or passwords are stored by this checklist.
Start with the Australian Government basics
The ACSC small-business guidance starts with multi-factor authentication, software updates and backups. After the basics, businesses can consider progressing toward the Essential Eight.
Minimum Cover Checklist
Work through each protection
Tick an item when it is covered. During an on-site visit, the technician can also set a status, priority and a short customer-friendly note.
0 of 10 covered
Not checked
Technician check: Are any business devices or applications no longer receiving security updates?
Official Australian Government guidance ↗Not checked
Technician check: Is protection enabled and healthy on every business laptop and desktop?
Official Australian Government guidance ↗Not checked
Technician check: When was the last successful backup, and when was a restore last tested?
Official Australian Government guidance ↗Not checked
Technician check: Are passwords reused, written down, shared in messages or stored in spreadsheets?
Official Australian Government guidance ↗Not checked
Technician check: Does every user have administrator access even when they do not need it?
Official Australian Government guidance ↗Not checked
Technician check: Are customer or guest devices sharing the same network as business computers or storage?
Official Australian Government guidance ↗Not checked
Technician check: Is there a repeatable verification step before changing supplier payment details?
Official Australian Government guidance ↗Not checked
Technician check: Who controls the domain, hosting and account-recovery details?
Official Australian Government guidance ↗Not checked
Technician check: Could the business act quickly if email, a device or an account were compromised today?
Official Australian Government guidance ↗Customer share link
Create a private read-only link after the on-site review. The link opens this same page in customer view. There is no SMS share, email share or PDF download.
Official Australian cyber-security resources
Small Business Cyber Security Guide
Practical ACSC guidance for small and medium businesses.
Read the official guide ↗Small Business Hub
Australian Government resources, device guidance and cyber-security help for small businesses.
Visit the official hub ↗Essential Eight
ASD's baseline mitigation strategies for protecting internet-connected IT environments.
Read Essential Eight explained ↗For current requirements and advice, always check the linked authority. Australian Cyber Security Hotline: 1300 CYBER1 (1300 292 371).
Need help completing the remaining items?
Your IT & Tech Mates can help with practical configuration of business devices, account protection, backups, Wi-Fi and everyday security settings. Recommendations from this checklist are guidance, not a formal cyber-security audit.