Title

Cyber Security Checklist

Item	Description	Status
Use strong passwords and change them regularly	Does the application have features to support this?	Yes No
Use Website Backups	Is the application/web server carrying out backups?	Yes No
Limit Contributors Permissions	Are only the required rights to perform tasks granted to a user?	Yes No
Secure online checkouts	Are you using AVS (address verification system) and take CVV (credit card verification value) when accepting any credit card payments?	Yes No
Update all plugins	Are all plugins up to date?	Yes No
Use anti-malware solutions	Are you using anti-malware?	Yes No
Consider DDos protection	Do you have Distributed Denial of Service (DDos) protection?	Yes No
XSS scripting attacks	Do you sanitize your input fields?	Yes No
SQL Injection	Do you filter input forms?	Yes No
Use security scanning tools	Do you use plugins and tools to scan for potential security risks?	Yes No
Hide your web host provider and version	Are you hiding the software name and version you are using?	Yes No
Be careful with file uploads	Are you restricting the type of files that can be uploaded?	Yes No
Be careful with file uploads	Are you changing permissions of the uploaded files to ensure that no files can execute post upload?	Yes No
Be careful with file uploads	Are you changing the directory that the files are uploaded to so that it cannot be easily guessed?	Yes No
Install an SSL certificate	Do you have an SSL certificate installed?	Yes No
Prevent spam	Are you preventing spam content?	Yes No
Follow ISO 27018 compliance	Are you ISO 27018 compliant?	Yes No
Use HTTP/2	Are you using HTTP/2?	Yes No