Phenicie Business Management

10-Question Montana Business Technology & Cybersecurity Review

Identify risks. Find gaps. Protect your business.

For each question below, decide whether the answer is Yes, Unsure, or No. Any unanswered or uncertain item is a business risk that needs an owner and a next action. This is the same checklist we walk through with clients before recommending changes — see the full context in 7 Technology Changes Montana Small Businesses Cannot Ignore in 2026.

1

Are all business computers actively monitored?

Current endpoint protectionSecurity monitoringUpdate managementDevice inventoryAlerting when protection stops working
Needs attention when: You do not have a current list of devices or cannot verify which systems are protected.
2

Are software and security updates verified?

Missing critical updatesFailed installationsComputers requiring restartsUnsupported operating systemsOutdated third-party applications
Needs attention when: Updates are assumed to work but no one reviews installation results.
3

Does every important account use multi-factor authentication?

Business emailMicrosoft 365 or Google WorkspaceAccounting platformsBanking and payroll servicesCloud storageRemote accessAdministrative accounts
Needs attention when: Any account containing business, financial, customer, or employee information relies only on a password.
4

Is business email protected from phishing and impersonation?

Executive impersonationFake invoicesPayment-redirection attemptsCompromised vendor accountsMalicious linksQR-code phishingLook-alike domains
Needs attention when: Employees are expected to identify every malicious message without additional technical protection.
5

Are backups monitored and regularly tested?

What information is backed upHow frequently backups runHow long information is retainedWhether failures generate alertsWhether data has been successfully restoredWhether cloud email and files are included
Needs attention when: Your business has never completed a documented restore test.
6

Are employee accounts and permissions reviewed?

Creating new accountsGranting appropriate accessRemoving former employeesReviewing administrative privilegesDisabling unused accountsChecking external file-sharing permissions
Needs attention when: Former employees, contractors, vendors, or unused accounts may still have access.
7

Are technology vendors and third parties being managed?

Company systemsCustomer informationFinancial informationCloud platformsNetworksRemote-access toolsBackups
Needs attention when: Multiple providers are involved but no one owns the complete security and recovery process.
8

Does your business have an approved AI-use policy?

Which AI tools are approvedWhat information cannot be enteredWhether customer data may be usedHow AI-generated work must be reviewedWho remains responsible for the final result
Needs attention when: Employees use personal AI accounts for business work without formal guidance.
9

Does your business have a documented incident-response plan?

Who must be contactedWho can disconnect affected systemsHow incidents are documentedHow backups are protectedWhen insurance, legal counsel, law enforcement, or regulators must be contactedHow customers and employees will be informed
Needs attention when: The first response to a cyber incident would be deciding whom to call.
10

Can your technology provider show evidence?

Which systems are protectedWhich updates are missingWhether backups succeededWhich security alerts remain openWhich accounts lack required safeguardsWhat work was completedWhat needs to happen next
Needs attention when: The only available status report is “everything looks fine.”

Your Results

8-10 Yes Answers

Strong Foundation. Continue validating your controls regularly.

5-7 Yes Answers

Meaningful Gaps. Prioritize every No answer and verify each Unsure answer.

0-4 Yes Answers

Immediate Review Recommended. Start with identity, endpoints, backups, email, and incident response.

Get Help Reviewing Your Results

Phenicie Business Management helps Montana businesses improve technology management, cybersecurity, cloud protection, backups, compliance readiness, and business continuity.

Schedule a Free Review

Call/text (406) 957-1576 or email brady@phenicie.com