Do you have MFA for email and sensitive information?

Do you have backups and are you sure they are working?

Do you have up-to-date, active antivirus installed on all computers?

Do you have a written documented breach response plan?

Do you have up-to-date, active firewall technology?