Do you provide ongoing employee training to help them identify risks and avoid mistakes?

Are you absolutely certain that your data is being backed up daily to a secure, remote location?

Do you avoid having your employee email addresses on your website?

Does your IT person conduct a test-restore of your data at least twice a year, and validate all the data is there?

Do you know exactly how fast your network could be back up and running if your server broke down or a disaster happened?

Does your IT person give you a monthly report to verify your network is being monitored for hackers, viruses, and prevent internal attacks?

Do you have a way to identify unauthorized software downloads on your network (shadow IT) or monitor for high risk usage of cloud apps?