Not sure if your small business is protected against account takeovers, scams and data loss? This Excel workbook turns public security guidance into a simple 30-point self-check you can finish in about 30 minutes. [What's inside] - 30-point checklist: answer Yes / Partly / No / N/A and get an automatic score for each area (accounts, updates, malware, devices, data, scams, incident plan, rules). Every 'No' becomes an automatic to-do list. - Accounts log: list the services you use and whether 2-step verification is on. Important accounts without 2FA turn red. (It never stores passwords.) - Devices log: auto updates, screen lock, encryption, remote wipe and backup for each device. - Backup log: shows how many days since your last backup and turns red after 30 days. - Incident plan: first steps and a contact list to fill in before anything goes wrong. [Who it's for] Freelancers, sole traders and small teams without an IT department. [Based on] UK Government Cyber Essentials, the UK NCSC Small Business Guide, US CISA Cyber Essentials, and IPA (Japan) guidelines for SMEs. [Requirements] Microsoft Excel (tested in Microsoft 365). The automatic to-do list needs Excel 2021 / Microsoft 365. [Please note] - A self-check tool, not a professional audit or a guarantee of security. - Do not store passwords, card numbers or bank details in the file. - Created with the help of AI and checked against the public guidance above. Japanese version: 情報セキュリティ 点検・管理シート