| Category | Failed Question | Priority | Recommendation |
|---|---|---|---|
| Network Security | Is the firewall enabled and configured? | Low | — |
| Network Security | Are all default passwords changed? | Low | — |
| Network Security | Is wireless network using WPA2 or higher? | Low | — |
| Network Security | Are unused ports disabled on switches? | Low | — |
| Backup & Recovery | Are backups running on a scheduled basis? | Low | — |
| Backup & Recovery | Are backups stored offsite or in the cloud? | Low | — |
| Backup & Recovery | Has a backup restore been tested recently? | Low | — |
| Access Control | Is multi-factor authentication enabled? | Low | — |
| Access Control | Are user access rights reviewed regularly? | Low | — |
| Access Control | Are terminated employees removed from all systems? | Low | — |
| Hardware | Is all hardware under warranty or support contract? | Low | — |
| Hardware | Are UPS units installed for critical equipment? | Low | — |
| Software & Licensing | Is all software properly licensed? | Low | — |
| Software & Licensing | Are operating systems up to date with patches? | Low | — |
| Software & Licensing | Is antivirus/endpoint protection installed? | Low | — |
The Compliance Checklist tool helps evaluate compliance, operational readiness, security posture, or audit status across custom categories using weighted yes/no assessments. It generates category scores, percentage results, radar chart visualization, pass/fail indicators, and actionable recommendations for incomplete or failed controls. Although commonly used for IT and cybersecurity audits, the checklist structure is flexible and can be adapted for business operations, HR, safety inspections, quality assurance, regulatory compliance, vendor assessments, or internal governance reviews.
A company evaluates its internal IT infrastructure using categories such as network security, backup recovery, access control, hardware management, and software licensing. The checklist highlights failed controls, generates category scores, and identifies operational gaps requiring remediation.