Practical checklist
15-Point Infrastructure and Security Assessment Checklist
A practical starting point for reviewing core technology and security controls.
Built for web and print. Use your browser’s print command to save a PDF for internal review.
- Maintain an accountable asset inventory
- Protect identities with MFA
- Review privileged access
- Confirm endpoint security coverage
- Recertify firewall rules
- Validate network segmentation
- Review remote-access VPN
- Confirm security logging
- Track vulnerabilities
- Test backup and recovery
- Maintain an incident-response process
- Control account offboarding
- Review vendor access
- Keep risk assessment current
- Assign remediation owners and dates
A practical next step
Turn the Checklist into an Action Plan
VeritySpan can help assess the current state, prioritize risk, and define controlled remediation.