Are all office and agent laptops/PCs running up-to-date antivirus and endpoint protection, not just Windows Defender on default settings?
If an agent's laptop or phone was lost or stolen tomorrow, could it be remotely locked or wiped before someone accessed what's on it?
Do your staff use their personal devices for work, checking listings, photos, or client details, without any company security controls on them?
Is patching handled through a managed process that verifies every device is actually up to date, or does it rely on individual computers' auto-update settings, with no one checking they worked?
When a staff member leaves the agency, is their access to office PCs, shared drives, and any local software revoked the same day?
Do you know how many devices, laptops, phones, tablets, currently have access to your agency's files and systems?
Are USB drives and personal external storage allowed to be plugged into office computers freely?
Has your current IT provider ever shown you a written report on your security posture (patching, backups, device health) in the last 6 months?
Are you confident your agency's local setup meets your obligations under the Privacy Act and the Cyber Security Act 2024, separate from what corporate covers?
If a staff member's device got infected with malware, would you find out from your systems, or from something going wrong first?
Do you have visibility over the security status of every device in your office right now, in one place?
