Cybersecurity checklist

Download the checklist here.

These tips - assembled with help from the Kentucky Office of Homeland Security (KOHS) and U.S. Cybersecurity & Infrastructure Security Agency (CISA) - represent a broad overview of cybersecurity best practices, many of which may soon be required to maintain cyber insurance eligibility.

 Use multifactor authentication for remote access tools and cloud services.

 Identify critical information and back it up through external hard drives or a cloud service. Test the backups.

 Keep operating systems up to date and turn on automatic updates.

 Conduct periodic training for your staff and review cybersecurity awareness tips, including password security.

 Sign up for free cybersecurity services from the Multi State Information Sharing and Analysis Center.

 Develop an incident response and disaster recovery plan and test that plan.

 Enable logging to document and monitor activity across your IT system.

 Make cybersecurity a priority that starts at the top and is standard practice throughout your organization.

 Conduct a vulnerability assessment to understand where you are strong and where you may need additional support.

 Develop and implement a cybersecurity policy that outlines processes and procedures for all staff.

 Have a designated internal employee responsible for cybersecurity. 

—Helpful tip: Watch for grants that could help fund cybersecurity initiatives—