CHECKLIST

Use Vacations to Test Your Cybersecurity

• Run a tabletop exercise

• How would you respond to an incident?

• Avoid a "single point of failure"

Ask These Questions When Team Members are Away

• Do you have security policies and procedures?

• Do you know how to access those policies and procedures?

• If so, do you understand the policies and procedures without your colleague’s help?

• Can you implement the procedures?

• Do you have access to the systems you need when your colleague is away?

• Do you rely on your colleague for all security-related decisions?

Address Vacations in Your Policies

• Who will respond to an incident when staff are away?

• Who is "on call"?

• When do you leave work devices at home?

Avoiding Insider Threats

• Consider a mandatory travel policy

• Observe trends when staff are out of the office

Reduce the Risk of Burnout

• Recognize the challenges in IT/cybersecurity roles

• Bring on additional support if possible

• Consider a job rotation policy

• Don't rely on a single staff member for all cybersecurity needs

• Create a knowledge base with important security information

• Encourage your staff to network with others

• Empower your staff to take responsibility for their security