Free Checklist — Instant Download

Is Your IT Company Actually Protecting You — Or Just Keeping the Lights On?

Download the 10 questions every business owner should ask their IT provider. The answers will tell you everything.

  • Find out if your backups would actually work in a crisis
  • Know if MFA and email security are actually enforced — not just enabled
  • Identify gaps your current provider may never mention on their own

Instant download. No spam. Just the questions you need.

This isn't about switching providers. It's about knowing what you're paying for.

What's Inside

Everything You Need to Have an Informed Conversation

The checklist is built for business owners — not IT professionals. No jargon. Just clear questions and a framework for evaluating the answers.

10 Specific Questions

Not generic advice. Questions you can bring to your next provider conversation.

Good Answer vs. Red Flag

Each question shows you what confidence looks like — and what evasion looks like.

Notes Field on Every Question

Document what your provider actually says. Their answers are the data.

Outcome Guide

What to do based on how your provider performed — from "you're in good shape" to "get a second opinion."

The 10 Questions

The Questions Your Provider Should Be Able to Answer Without Hesitation

These aren't trick questions. They're the baseline. If your provider struggles with any of them, that's your signal.

01
Backup Testing

Are your backups tested — and can you show proof?

02
MFA Enforcement

Is MFA enforced across our accounts — or just available?

03
Admin Access

Who has admin rights, and is that list reviewed?

04
Email Security

Is email security configured — SPF, DKIM, and DMARC?

05
Dark Web Monitoring

Are you monitoring our domain on the dark web?

06
Security Plan

Do we have a written security plan?

07
Patch Management

How are patches and updates managed?

08
Business Reviews

Do we have scheduled quarterly business reviews?

09
Incident Response

Do we have a documented incident response plan?

10
Cyber Insurance

Are our controls aligned with our cyber insurance policy?

Why This Matters

The Numbers Don't Lie

43%
of cyberattacks target small businesses — yet most owners assume they're not a target
3+
unaddressed gaps found on average — based on our internal second-opinion reviews
Most
IT providers never proactively raise these 10 issues unless directly asked

Most breaches are discovered after the fact. The questions in this checklist take 15 minutes now — or cost thousands later.

Get the Checklist

Find Out Where You Actually Stand

Enter your name and email to receive the PDF immediately. Use it in your next conversation with your IT provider — or share it with your team.

  • 10 questions with good answer vs. red flag guidance
  • Notes field to document your provider's actual responses
  • Outcome guide based on how they perform
Free Second-Opinion Review

Not Getting the Answers You Need?

If your provider struggles with any of these questions, that's your answer. Book a free Second-Opinion IT Review — 30 minutes, no obligation. We'll tell you exactly what's in place, what isn't, and what it would take to close the gaps.

Book a Free Second-Opinion IT Review

30 minutes. No obligation. No sales pitch.