Professional services security checklist

Could you show a client how you protect their files?

A checklist for your security plan, access to client files, and the vendors that handle them. For accounting, legal, consulting and agency firms. About ten minutes, no form to fill in.

By continuing, you agree to our cookie policy.

See all 15 questions

Your security plan

  1. Do you have a written information security plan?
  2. Is one named person responsible for it?
  3. Has the plan been reviewed in the last 12 months?
  4. Does the plan include a written risk assessment?

Access to client files

  1. Does everyone have their own login for systems that hold client files?
  2. Is multi-factor authentication on for email, document storage and remote access?
  3. Is access removed the same day someone leaves?
  4. Are client files shared through approved tools only?
  5. Do you review who can reach client files on a schedule?

Software vendors and your IT provider

  1. Do you have a list of every vendor that stores or can reach client data?
  2. Have you asked each one how they protect client data?
  3. Do your contracts require vendors to protect client data?
  4. Do you know what access your IT provider has, and how it's protected?

If something goes wrong

  1. Do you have a written incident response plan?
  2. Do you know your reporting deadlines?