Ongoing practice.
MONTHLY
Confirm updates are applying across devices Check backups ran Review login notifications and alerts Reconcile bank transactions
QUARTERLY
Review who has access to what Review connected applications and revoke unused ones Review devices and who holds them Check router and equipment firmware
ANNUALLY
Test restoring a backup Review what data you hold and delete what you do not need Review your policy and whether it is followed Review your incident plan Check account recovery actually works
AFTER ANY DEPARTURE
Remove everything, the same day.
AFTER ANY INCIDENT
Review and change what allowed it.
WHO DOES IT
Someone specific.
Security that is everyone's responsibility is nobody's.
WHAT TO RECORD
That each was done, and what was found.
WHY A ROUTINE
Incidents happen disproportionately to neglected systems.
