{"id":21647,"date":"2020-02-13T20:48:39","date_gmt":"2020-02-13T20:48:39","guid":{"rendered":"https:\/\/www.process.st\/templates\/information-security-checklist-template\/"},"modified":"2024-05-16T06:40:45","modified_gmt":"2024-05-16T06:40:45","slug":"information-security-checklist-template","status":"publish","type":"post","link":"https:\/\/www.process.st\/templates\/information-security-checklist-template\/","title":{"rendered":"Information Security Checklist Template"},"content":{"rendered":"\n<section id=\"introduction\">\n <h2>Introduction:<\/h2>\n <div class=\"image-content\">\n  <figure>\n   <a href=\"https:\/\/ps-attachments.s3.amazonaws.com\/00857586-20e3-4664-86d5-057fe364412f\/tuhumwALJGP8bXTv5GxJgg.png\" alt=\"Introduction:\" target=\"_blank\" rel=\"noopener\"> <img decoding=\"async\" loading=\"lazy\" src=\"https:\/\/ps-attachments.s3.amazonaws.com\/00857586-20e3-4664-86d5-057fe364412f\/tuhumwALJGP8bXTv5GxJgg.png\"> <\/a><!-- No caption -->\n  <\/figure>\n <\/div>\n <div class=\"text-content\">\n  <p><a href=\"https:\/\/www.process.st\/it-security-processes\/\" rel=\"nofollow noopener\" target=\"_blank\">Information security<\/a> is a process that should be prioritized in order to keep your company's private information just as it is: private. If your company's sensitive information isn't properly protected, it runs the potential of being breached and damaging the privacy and future of your company and employees.<\/p>\n  <p>Running an information security audit every six months allows you to take measures against any potential threats to your system and prepare for the worst.<\/p>\n  <p>Though it's nearly impossible to deflect every possible issue that may arise, it's definitely possible to protect your company's information from common threats by running a security audit regularly (key word: preventative risk management).<\/p>\n  <p>This is why we, at <a href=\"https:\/\/www.youtube.com\/watch?v=jtSUWKI6PNo\" rel=\"nofollow noopener\" target=\"_blank\">Process Street<\/a>, created this information security checklist template, to provide an easy process you can follow <a href=\"https:\/\/www.process.st\/case-study-techmd\/\" rel=\"nofollow noopener\" target=\"_blank\">every six months<\/a> that will help mitigate any chance of misstep that could potentially leave your sensitive information compromised.<\/p>\n <\/div>\n<\/section>\n<section id=\"evaluating-risks\">\n <h2>Evaluating risks:<\/h2>\n<\/section>\n<section id=\"run-securityrisk-audit\">\n <h2>Run security\/risk audit<\/h2>\n <div class=\"text-content\">\n  <p>Your first step to running this Information Security Checklist should be to run a <a href=\"https:\/\/www.process.st\/checklist\/network-security-audit-checklist\/\" rel=\"nofollow noopener\" target=\"_blank\">security<\/a>\/risk audit to evaluate and identify your company's existing security risks.<\/p>\n  <p>Use the <a href=\"https:\/\/www.process.st\/help\/docs\/form-fields\/\" rel=\"nofollow noopener\" target=\"_blank\">form field<\/a> below to note what your current risks are.<\/p>\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Security\/risk audit notes <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"implementing-security-measures\">\n <h2>Implementing security measures:<\/h2>\n<\/section>\n<section id=\"establish-reliable-physical-security\">\n <h2>Establish reliable physical security<\/h2>\n <div class=\"text-content\">\n  <p>Physical security is just as important as digital security.<\/p>\n  <p>Make sure your company building is physically protected by things like: access codes, building security, camera surveillance, locks, etc.<\/p>\n  <p>Establish employee policies for how to handle any computers and make sure all employees are informed.<\/p>\n <\/div>\n<\/section>\n<section id=\"restrict-user-permissions\">\n <h2>Restrict user permissions<\/h2>\n <div class=\"text-content\">\n  <p>Limit your users' permissions to only what they absolutely need.&nbsp;<\/p>\n  <p>When users have free reign, it runs the risk of misuse such as, downloading malware that can damage your system and risk the safety of your sensitive information.<\/p>\n <\/div>\n<\/section>\n<section id=\"run-regular-security-updates\">\n <h2>Run regular security updates<\/h2>\n <div class=\"text-content\">\n  <p>Make sure to stay up-to-date with all of your computer's software security updates.<\/p>\n  <p>When vulnerabilities are found in software, most companies will include fixes to these bugs in their updates. Otherwise, it may leave your system open to compromise.<\/p>\n <\/div>\n<\/section>\n<section id=\"use-antivirus-software\">\n <h2>Use antivirus software<\/h2>\n <div class=\"text-content\">\n  <p>An important step of this checklist is using an antivirus software.<\/p>\n  <p>Computer viruses can range from mild to potentially very damaging and it's not worth taking the risk; especially given how easy it can be for your system to contract a virus.<\/p>\n <\/div>\n<\/section>\n<section id=\"ensure-computers-and-networks-are-protected-by-a-firewall\">\n <h2>Ensure computers and networks are protected by a firewall<\/h2>\n <div class=\"text-content\">\n  <p>Ensure that your network and computers are protected by a firewall. This will mean that your network and devices won't be able to be seen by anyone online.<\/p>\n <\/div>\n<\/section>\n<section id=\"use-strong-passwords\">\n <h2>Use strong passwords<\/h2>\n <div class=\"text-content\">\n  <p>Make sure your <a href=\"https:\/\/www.process.st\/checklist\/privileged-password-management\/\" rel=\"nofollow noopener\" target=\"_blank\">passwords<\/a> are all difficult to guess.<\/p>\n  <p>They should:&nbsp;<\/p>\n <\/div>\n <div class=\"multi-select-content form-field-content\">\n  <div class=\"form-group\">\n   <label> (Subtasks) <\/label>\n  <\/div>\n  <ul class=\"items\">\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      1\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     be at least six characters long\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      2\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     use both lowercase and capital letters\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      3\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     use a combination of letters, numbers and special characters such as &lt;, } and ~. \u2013\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      4\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     include misspelled words with special characters, such as \u201cL@Og&amp;NoE1$#8\u201d\n    <\/div><\/li>\n  <\/ul>\n <\/div>\n<\/section>\n<section id=\"create-regular-backups-of-important-data\">\n <h2>Create regular backups of important data<\/h2>\n <div class=\"text-content\">\n  <p>Make sure you are regularly backing up all of your important data and store the backups at a location that isn't your company's location.<\/p>\n  <p>This will ensure not only that your sensitive information is kept safe from cyber threats, but also kept safe from any potential physical risks, such as a fire.<\/p>\n <\/div>\n<\/section>\n<section id=\"encrypt-client-data\">\n <h2>Encrypt client data<\/h2>\n <div class=\"text-content\">\n  <p>Ensure that all of your client information is encrypted and therefore kept safe from potential hackers.<\/p>\n <\/div>\n<\/section>\n<section id=\"use-an-email-spam-filter\">\n <h2>Use an e-mail spam filter<\/h2>\n <div class=\"text-content\">\n  <p>Invest in an <a href=\"https:\/\/www.process.st\/checklist\/email-server-security\/\" rel=\"nofollow noopener\" target=\"_blank\">e-mail<\/a> spam filtration service.<\/p>\n  <p>Emails run the risk of having attached viruses or spyware and can end up infecting your computer or system.<\/p>\n <\/div>\n<\/section>\n<section id=\"prepare-for-emergency\">\n <h2>Prepare for emergency<\/h2>\n <div class=\"text-content\">\n  <p>Create a backup plan for moving forward with your business operations and bouncing back from an emergency if the worst were to happen.<\/p>\n  <p>Make sure to review and test this plan annually.<\/p>\n <\/div>\n<\/section>\n<section id=\"approval-final-approval-manager\">\n <h2>Approval: Final Approval (Manager)<\/h2>\n <div class=\"approval-content\">\n  <div class=\"header\">\n   <div class=\"list-title\">\n    Will be submitted for approval:\n   <\/div>\n  <\/div>\n  <div class=\"approval-rule-subject-tasks-list\">\n   <ul class=\"list\">\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Run security\/risk audit<\/span>\n        <div class=\"body\">\n         Will be submitted\n        <\/div>\n       <\/div>\n      <\/div>\n     <\/div><\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Establish reliable physical security<\/span>\n        <div class=\"body\">\n         Will be submitted\n        <\/div>\n       <\/div>\n      <\/div>\n     <\/div><\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Restrict user permissions<\/span>\n        <div class=\"body\">\n         Will be submitted\n        <\/div>\n       <\/div>\n      <\/div>\n     <\/div><\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Run regular security updates<\/span>\n        <div class=\"body\">\n         Will be submitted\n        <\/div>\n       <\/div>\n      <\/div>\n     <\/div><\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Use antivirus software<\/span>\n        <div class=\"body\">\n         Will be submitted\n        <\/div>\n       <\/div>\n      <\/div>\n     <\/div><\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Ensure computers and networks are protected by a firewall<\/span>\n        <div class=\"body\">\n         Will be submitted\n        <\/div>\n       <\/div>\n      <\/div>\n     <\/div><\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Use strong passwords<\/span>\n        <div class=\"body\">\n         Will be submitted\n        <\/div>\n       <\/div>\n      <\/div>\n     <\/div><\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Create regular backups of important data<\/span>\n        <div class=\"body\">\n         Will be submitted\n        <\/div>\n       <\/div>\n      <\/div>\n     <\/div><\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Encrypt client data<\/span>\n        <div class=\"body\">\n         Will be submitted\n        <\/div>\n       <\/div>\n      <\/div>\n     <\/div><\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Use an e-mail spam filter <\/span>\n        <div class=\"body\">\n         Will be submitted\n        <\/div>\n       <\/div>\n      <\/div>\n     <\/div><\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Prepare for emergency<\/span>\n        <div class=\"body\">\n         Will be submitted\n        <\/div>\n       <\/div>\n      <\/div>\n     <\/div><\/li>\n   <\/ul>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"sources\">\n <h2>Sources:<\/h2>\n <div class=\"text-content\">\n  <ul>\n   <li><a href=\"http:\/\/www.dotnetfunda.com\/\" rel=\"nofollow noopener\" target=\"_blank\">dotnetfunda<\/a>&nbsp;-&nbsp;<a href=\"http:\/\/www.dotnetfunda.com\/articles\/show\/1083\/restricting-user-to-login-multiple-times-using-same-credentials\" rel=\"nofollow noopener\" target=\"_blank\">Restricting Use To Login Multiple Times Using Same Credentials<\/a><\/li>\n   <li><a href=\"http:\/\/geekswithblogs.net\/\" rel=\"nofollow noopener\" target=\"_blank\">geekswithblogs<\/a>&nbsp;-&nbsp;<a href=\"http:\/\/geekswithblogs.net\/Frez\/articles\/preventing-a-user-from-having-multiple-concurrent-sessions.aspx\" rel=\"nofollow noopener\" target=\"_blank\" title=\"Title of this entry.\">Preventing a User From Having Multiple Concurrent Sessions<\/a><\/li>\n   <li><a href=\"https:\/\/www.codeproject.com\/\" rel=\"nofollow noopener\" target=\"_blank\">codeproject<\/a>&nbsp;-&nbsp;<a href=\"https:\/\/www.codeproject.com\/Questions\/410002\/How-to-avoid-multi-user-signin-using-same-credenti\" rel=\"nofollow noopener\" target=\"_blank\">How To Avoid Multi-User Sign-In Using Same Credentials<\/a><\/li>\n   <li><a href=\"https:\/\/securitywing.com\/\" rel=\"nofollow noopener\" target=\"_blank\">securitywing<\/a>&nbsp;-&nbsp;<a href=\"https:\/\/securitywing.com\/63-web-application-security-checklist-auditors-developers\/\" rel=\"nofollow noopener\" target=\"_blank\">63 Web Application Security Checklist for IT Security Auditors and Developers<\/a><\/li>\n  <\/ul>\n <\/div>\n<\/section>\n<section id=\"related-checklists\">\n <h2>Related checklists:<\/h2>\n <div class=\"text-content\">\n  <ul>\n   <li><a href=\"https:\/\/process.st\/checklist\/invoice-approval-workflow-checklist-template\" rel=\"nofollow noopener\" target=\"_blank\">Invoice Approval Workflow Checklist Template<\/a><\/li>\n   <li><a href=\"https:\/\/process.st\/checklist\/blog-content-approval-checklist-template\" rel=\"nofollow noopener\" target=\"_blank\">Blog Content Approval Checklist Template<\/a><\/li>\n   <li><a href=\"https:\/\/process.st\/checklist\/graphic-design-approval-checklist-template\" rel=\"nofollow noopener\" target=\"_blank\">Graphic Design Approval Checklist Template<\/a><\/li>\n   <li><a href=\"https:\/\/process.st\/checklist\/wordpress-security-audit-checklist-template\" rel=\"nofollow noopener\" target=\"_blank\">WordPress Security Audit Checklist Template<\/a><\/li>\n   <li><a href=\"https:\/\/process.st\/checklist\/video-content-approval-workflow-checklist-template\" rel=\"nofollow noopener\" target=\"_blank\">Video Content Approval Workflow Checklist Template<\/a><\/li>\n   <li><a href=\"https:\/\/process.st\/checklist\/application-security-audit-checklist-template\" rel=\"nofollow noopener\" target=\"_blank\">Application Security Audit Checklist Template<\/a><\/li>\n   <li><a href=\"https:\/\/process.st\/checklist\/content-marketing-workflow-management-checklist-template\" rel=\"nofollow noopener\" target=\"_blank\">Content Marketing Workflow Management Checklist Template<\/a><\/li>\n   <li><a href=\"https:\/\/process.st\/checklist\/enterprise-password-management-checklist-template\" rel=\"nofollow noopener\" target=\"_blank\">Enterprise Password Management Checklist Template<\/a><\/li>\n   <li><a href=\"https:\/\/process.st\/checklist\/enterprise-video-content-management-checklist\" rel=\"nofollow noopener\" target=\"_blank\">Enterprise Video Content Management Checklist<\/a><\/li>\n  <\/ul>\n <\/div>\n<\/section>\n","protected":false},"excerpt":{"rendered":"<p>Introduction: Information security is a process that should be prioritized in order to keep your company's private information just as it is: private. If your company's sensitive information isn't properly protected, it runs the potential of being breached and damaging the privacy and future of your company and employees. Running an information security audit every [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":21648,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"ep_exclude_from_search":false,"cover_icon_emoji":"\ud83d\udd13","cover_icon_url":"","tasks_count":"17","template_description":"Run this checklist whenever you need to manage information security.","template_id":"nmEDbul-ciKWHbJY53hJPQ","task_0":"Introduction:","task_slug_0":"introduction","task_1":"Evaluating risks:","task_slug_1":"evaluating-risks","task_2":"Run security\/risk audit","task_slug_2":"run-securityrisk-audit","task_3":"Implementing security measures:","task_slug_3":"implementing-security-measures","task_4":"Establish reliable physical security","task_slug_4":"establish-reliable-physical-security","task_5":"Restrict user permissions","task_slug_5":"restrict-user-permissions","task_6":"Run regular security updates","task_slug_6":"run-regular-security-updates","task_7":"Use antivirus software","task_slug_7":"use-antivirus-software","task_8":"Ensure computers and networks are protected by a firewall","task_slug_8":"ensure-computers-and-networks-are-protected-by-a-firewall","task_9":"Use strong passwords","task_slug_9":"use-strong-passwords","task_10":"Create regular backups of important data","task_slug_10":"create-regular-backups-of-important-data","task_11":"Encrypt client data","task_slug_11":"encrypt-client-data","task_12":"Use an e-mail spam filter ","task_slug_12":"use-an-email-spam-filter","task_13":"Prepare for emergency","task_slug_13":"prepare-for-emergency","task_14":"Approval: Final Approval (Manager)","task_slug_14":"approval-final-approval-manager","task_15":"Sources:","task_slug_15":"sources","task_16":"Related checklists:","task_slug_16":"related-checklists","task_17":"","task_slug_17":"","task_18":"","task_slug_18":"","task_19":"","task_slug_19":"","task_20":"","task_slug_20":"","task_21":"","task_slug_21":"","task_22":"","task_slug_22":"","task_23":"","task_slug_23":"","task_24":"","task_slug_24":"","task_25":"","task_slug_25":"","task_26":"","task_slug_26":"","task_27":"","task_slug_27":"","task_28":"","task_slug_28":"","task_29":"","task_slug_29":"","task_30":"","task_slug_30":"","task_31":"","task_slug_31":"","task_32":"","task_slug_32":"","task_33":"","task_slug_33":"","task_34":"","task_slug_34":"","task_35":"","task_slug_35":"","task_36":"","task_slug_36":"","task_37":"","task_slug_37":"","task_38":"","task_slug_38":"","task_39":"","task_slug_39":"","task_40":"","task_slug_40":"","task_41":"","task_slug_41":"","task_42":"","task_slug_42":"","task_43":"","task_slug_43":"","task_44":"","task_slug_44":"","task_45":"","task_slug_45":"","task_46":"","task_slug_46":"","task_47":"","task_slug_47":"","task_48":"","task_slug_48":"","task_49":"","task_slug_49":"","task_50":"","task_slug_50":"","task_51":"","task_slug_51":"","task_52":"","task_slug_52":"","task_53":"","task_slug_53":"","task_54":"","task_slug_54":"","task_55":"","task_slug_55":"","task_56":"","task_slug_56":"","task_57":"","task_slug_57":"","task_58":"","task_slug_58":"","task_59":"","task_slug_59":"","task_60":"","task_slug_60":"","task_61":"","task_slug_61":"","task_62":"","task_slug_62":"","task_63":"","task_slug_63":"","task_64":"","task_slug_64":"","task_65":"","task_slug_65":"","task_66":"","task_slug_66":"","task_67":"","task_slug_67":"","task_68":"","task_slug_68":"","task_69":"","task_slug_69":"","task_70":"","task_slug_70":"","task_71":"","task_slug_71":"","task_72":"","task_slug_72":"","task_73":"","task_slug_73":"","task_74":"","task_slug_74":"","task_75":"","task_slug_75":"","task_76":"","task_slug_76":"","task_77":"","task_slug_77":"","task_78":"","task_slug_78":"","task_79":"","task_slug_79":"","task_80":"","task_slug_80":"","task_81":"","task_slug_81":"","task_82":"","task_slug_82":"","task_83":"","task_slug_83":"","task_84":"","task_slug_84":"","task_85":"","task_slug_85":"","task_86":"","task_slug_86":"","task_87":"","task_slug_87":"","task_88":"","task_slug_88":"","task_89":"","task_slug_89":"","task_90":"","task_slug_90":"","task_91":"","task_slug_91":"","task_92":"","task_slug_92":"","task_93":"","task_slug_93":"","task_94":"","task_slug_94":"","task_95":"","task_slug_95":"","task_96":"","task_slug_96":"","task_97":"","task_slug_97":"","task_98":"","task_slug_98":"","task_99":"","task_slug_99":"","footnotes":""},"categories":[60,57],"tags":[],"class_list":["post-21647","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-creative-workflow-management","category-information-security"],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/posts\/21647","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/comments?post=21647"}],"version-history":[{"count":0,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/posts\/21647\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/media\/21648"}],"wp:attachment":[{"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/media?parent=21647"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/categories?post=21647"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/tags?post=21647"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}