CX CYBER SECURITY | OWNER DISCUSSION CHECKLIST
Navy veteran owned | Minnesota focused
Updated October 31, 2026

No signup. General education, not a scan, certification or risk score. Do not write credentials or client information here.

1. Who owns your critical accounts?
List your business email, domain registrar, cloud storage and finance systems. Identify the business owner and administrator for each.
Owner: __________  Next action: __________

2. Where is multi-factor authentication enabled?
Ask the administrator to explain coverage and exceptions, especially for email and privileged access. Do not change settings without a test and recovery plan.
Owner: __________  Next action: __________

3. How do people join and leave?
Ask who approves new access, removes departing staff and checks contractor accounts.
Owner: __________  Next action: __________

4. Which devices support important work?
Identify the agreed business device inventory and who owns update and security responsibilities.
Owner: __________  Next action: __________

5. Who can share files outside the business?
Discuss external collaboration, approval and how access is reviewed when a project ends.
Owner: __________  Next action: __________

6. What is actually backed up?
Ask for the coverage and retention information for your agreed critical systems and data.
Owner: __________  Next action: __________

7. What was last restored successfully?
Ask for documented restore-test evidence and the system or data it covered. Avoid assuming a job-success message proves end-to-end recovery.
Owner: __________  Next action: __________

8. Who verifies payment-detail changes?
Decide how a trusted contact is reached through an independently known channel before payment instructions are changed.
Owner: __________  Next action: __________

9. Who gets called when something looks wrong?
Keep your IT provider, insurer reporting route and incident-response contacts available. Confirm who has authority to make decisions.
Owner: __________  Next action: __________

10. Who owns the next three improvements?
Choose priorities with the appropriate technical owner. Record the owner, next action and target discussion date; validate scope before changes.
Owner: __________  Next action: __________

Learn more: https://cxcybersecurity.com/
Enquiries: xavier@xmartinelaw.com
Preparing for launch; work requires finalized onboarding and a written agreement.
Resource: https://www.nist.gov/itl/smallbusinesscyber