A 30-DAY DEFENSE PLAN
How exposed is your team?
Highly exposed
0 / 16
Start with the first two items this week. They cost nothing and they guard the money directly.
Bank-detail changes are confirmed by calling a number already on file
Two people must approve any payment above a set amount
Finance staff and leaders share a code word or challenge question
Email admins and finance staff sign in with passkeys or security keys
Nobody with admin rights relies on text-message codes
Device-code sign-in is blocked and staff can't approve unknown apps
Your domain has SPF, DKIM and a DMARC policy at quarantine or reject
Everyone uses a company password manager
Staff ran a scam drill this year that included a call or a text
Your bank's fraud line and the IC3 steps are written down