Cyber Security Guides — IT Club
Step-by-step guides, checklists and downloadable resources to help you get more from the technology your business already uses.
Find straightforward guidance on Microsoft 365, cyber security, productivity, websites, AI and everyday IT management.
No jargon. No unnecessary product sales. Just practical help.
Free to ask. No credit card. No sales pressure. Fair usage applies.
27 resources found
Subject Access Request First Response Checklist
A practical first-response checklist for handling a subject access request (SAR) without panic. Covers receiving and logging the request, classifying related rights, proportionate identity checks, data mapping, search, review, redaction, secure response and evidence.
7 minutes
Business Document Exposure Review Checklist
A structured checklist for identifying, classifying and securing business documents that may have been unintentionally exposed online. Covers domain scoping, file-type searches, cloud-sharing reviews, document content checks, incident response, verification and prevention.
8 minutes
Vulnerability Patch Wave Readiness Checklist
A structured checklist for assessing whether your organisation can prioritise, test and deploy security patches as AI-assisted vulnerability discovery increases the volume and frequency of updates. Covers assets, exposure, updates, prioritisation, testing, deployment, exceptions and unsupported systems.
8 minutes
Sensitive Information and AI Checklist
A structured checklist for reducing information before using AI tools and deciding whether a service is appropriate. Covers classification, approval, data minimisation, file preparation, prohibited information, Temporary Chat steps, review and warning signs.
6 minutes
Dark-Web Alert Response Checklist
Validate a dark-web finding, secure affected accounts, review devices and sessions, assess exposed data and document the response.
10 minutes
AI Agent Safety Checklist
Review an AI agent’s tools, permissions, data access, network connections, human approvals, monitoring and emergency-stop controls.
12 minutes
Microsoft Secure Score Review Checklist
A structured checklist for understanding Microsoft Secure Score, prioritising meaningful security improvements and preventing controls drifting afterwards. Covers score understanding, identity and administrator controls, application permissions, email security, sharing, devices, exceptions, testing and ongoing monitoring.
8 minutes
Microsoft 365 Security Baseline Checklist
A structured checklist for reviewing a Microsoft 365 tenant against seven core security controls: authentication, administrator privilege, external sharing, device access, audit logging, security baseline and risk monitoring. Includes a self-assessment guide and PDF download.
10 minutes
Missing Email Investigation Checklist
Find out whether an expected email was sent, delivered, quarantined, moved by a rule or rejected before changing security settings.
10 minutes
Connected Application Access Review
Identify applications connected to Google or Microsoft accounts, review their permissions and remove access that is no longer required.
10 minutes
Choosing the Right Business Certification
A practical guide to ISO 9001, ISO 27001, ISO 14001, Cyber Essentials and Cyber Essentials Plus — what each covers, who it suits and how to choose the right starting point for your business.
7 minutes
Business Guide to DMARC
A plain-English guide for business owners explaining what DMARC, SPF and DKIM are, what they protect against, what they do not do, and why careful implementation matters.
7 minutes
OneDrive and SharePoint Deleted File Recovery Checklist
Where to look when a OneDrive, SharePoint or Teams file disappears. Covers the online Recycle Bin, SharePoint two-stage recovery, version history, OneDrive Restore and why the Windows Recycle Bin may no longer help.
7 minutes
Safe Group Email Checklist
Ten checks before sending a group email in Outlook. Protect recipient addresses, avoid autocomplete mistakes and respond correctly if something goes wrong.
5 minutes
DMARC: Three Questions to Ask Your IT Provider
Check whether your business email domain is protected against spoofing and impersonation.
4 minutes
Is Your Business VPN Properly Protected?
Questions to ask about how your business VPN is set up, monitored and maintained.
5 minutes
WhatsApp Impersonation and Payment Fraud Checklist
Checks to help staff spot fake WhatsApp accounts and verify payment requests safely.
5 minutes
Microsoft Passkey Readiness Guide
Check which users, devices, authentication policies and recovery procedures your business should review before Microsoft retires its own SMS and voice authentication.
5 minutes
Microsoft SMS and Voice MFA Retirement Checklist
Work through the discovery, policy, pilot, communication and closure steps before Microsoft retires its own SMS and voice authentication in February 2027.
8 minutes
Passkey Setup Guide for Microsoft and Google
Create a more phishing-resistant sign-in method on a trusted device and prepare a safe recovery route before relying on it.
5 minutes
Cyber Essentials Readiness Checklist
Work through the key controls to review before applying for Cyber Essentials.
15 minutes
Cyber Resilience Readiness Guide
Review your critical systems, IT suppliers, incident response, backups and business-continuity arrangements.
7 minutes
Cyber Insurance Readiness Guide
Review the policy questions, technical controls, backups and incident-response arrangements your business should check before buying or renewing cyber insurance.
7 minutes
Browser Extension Security Audit
Identify installed browser extensions, review their permissions and decide which should be approved, restricted or removed from business browsers.
10 minutes
Image Authenticity Verification Checklist
Trace an image to its source, inspect its context, compare independent evidence and review available provenance before sharing or acting.
5 minutes
Remote Working Security Checklist
The security basics to check for staff working from home or on the move.
10 minutes
Business Browser Security Checklist
A practical checklist for securing Chrome on business Windows PCs: screen locking, individual user accounts, Windows Hello configuration, Chrome password autofill verification, payment autofill verification, saved card review, extension management, Google Account MFA and passkeys.
5 minutes
Still unsure what applies to your business?
Ask the IT Club Advisor about Microsoft 365, browsers, cyber security, productivity or any everyday technology problem.
Free to ask. No credit card. No sales pressure. Fair usage applies.