WISP Readiness Check
A 5-point technical assessment based on FTC Safeguards Rule enforcement.
1. Is Multi-Factor Authentication (MFA) strictly enforced for ALL users accessing the network remotely (including VPNs and Cloud Apps) with zero exceptions for senior partners?
2. Are your cloud backups immutable? (i.e., If a Domain Admin account is compromised, is it impossible for the attacker to delete the cloud backups?)
3. Have you executed a full, bare-metal server restoration test in the last 12 months and documented the time to recover?
4. Is Endpoint Detection and Response (EDR) deployed on all firm devices, monitored by a 24/7 Security Operations Center (SOC)?
5. Has your current WISP document been reviewed and updated to reflect your actual technology stack within the last 12 months?