A vendor-neutral checklist for identity, email, file sharing, devices, sensitive information, and administrative controls.
Identity and access
Review multifactor authentication, conditional access where available, privileged accounts, service identities, stale accounts, and emergency access procedures.
Email security
Validate anti-phishing controls, malicious-link defenses, attachment scanning, domain authentication, email flow, and incident response procedures.
Collaboration security
Assess external sharing, public links, guest access, workspace owners, and effective permissions across document and collaboration systems.
Endpoint and device controls
Confirm device health requirements, endpoint protection, secure access from unmanaged devices, and controls on downloading sensitive information.
Administrative governance
Use least privilege, separation of duties, change tracking, alerting, and documented responsibilities for ongoing operation.
Apply This Guidance
Need help turning these practices into an actionable plan?
Karatin can help assess current-state controls, identify gaps, and create a prioritized remediation roadmap.
Contact Karatin