15-control readiness check — The Cyber Prepper

Boundary

3 controls

Segment trusted, guest and IoT devicesRisky devices cannot initiate connections to trusted systems. Replace default administrationUnique admin credentials, remote admin disabled or strictly restricted. Use encrypted remote accessNo management port is directly exposed to the internet.

System

5 controls

Enable supported automatic updatesOperating systems, browsers, router firmware and key apps are current. Encrypt storageFull-disk encryption is on and recovery keys are stored separately. Use least privilegeDaily work does not use an administrator account. Keep useful security logsImportant account, device and network events can be reviewed. Test an offline restoreA recent protected copy has been restored successfully.

Human

7 controls

Use phishing-resistant MFA where possibleCritical email, finance and admin accounts require a second factor. Use a password managerEvery important account has a unique, generated password. Retire unsupported devicesDevices that no longer receive security updates are isolated or replaced. Verify unusual requests out of bandMoney, credential and urgent data requests use a known second channel. Write the first-hour incident planContacts, containment steps and decision owners are known. Keep critical information offlineContacts, recovery codes and essential instructions do not require a cloud login. Rehearse once per yearThe household or team has walked through one realistic scenario.

Fifteen controls. One honest score.

Boundary

System

Human