Accounts and MFA
Identify email, administrator, remote access and important application accounts. Review multi-factor authentication, account recovery, shared sign-ins and staff onboarding or departures. Clarify who owns administrative access and how access is removed when it is no longer needed.
Endpoint security and maintenance
Inventory the workstations and other supported devices, then review protection, update status and local administrator rights. A protection tool needs someone responsible for its alerts and maintenance. Discuss unsupported equipment and business applications before scheduling changes.
Backups and a usable restore plan
Identify essential files and systems, backup locations, access permissions and who reviews failures. Agree which work needs to resume first after a disruption. A documented restore check can reveal missing dependencies that a backup-job notification does not explain.