These step-by-step guides will help you complete each item on the โ โ Information Security checklist for employeesโ .
Check if your operating system is (still) supported
An unsupported OS no longer receives security patches, leaving your device vulnerable to attacks that have already been fixed for everyone else.
Mac:
- Step 1: Find out which operating system (OS) you're running:
- Click the Apple logo โ About This Mac
- Step 2: Check if it's still supported here .
Windows:
- Step 1: Find out which operating system (OS) you're running:
- Press
Windows key + R, typewinver, press Enter - Step 2: Check if it's still supported on Microsoft's official page . Also this page with full Windows lifecycle/support date can be useful.
Keep your OS and apps up to date
Most cyberattacks exploit known vulnerabilities that updates have already fixed. Enable automatic updates so this happens without thinking about it โ and do a manual check now if you haven't recently.
Mac:
- Enable auto-updates: System Settings โ General โ Software Update โ turn on Automatically keep my Mac up to date
- App Store auto-updates: App Store โ Settings โ Automatic Updates
- Keep your Mac up to date
- Check for updates now: Check for Mac updates
Windows:
- Enable auto-updates: Settings โ Windows Update โ Advanced options โ turn on Automatic updates
- Microsoft Store app updates: Microsoft Store โ Account โ Settings โ App updates โ Update apps automatically
- Turn on automatic app updates
- Check for updates now: Check for Windows updates
iPhone / iPad:
- Enable auto-updates: Settings โ General โ Software Update โ Automatic Updates โ turn on all toggles
- Check for updates now: Check for iPhone/iPad updates
Android:
- Enable auto-updates: Settings โ Software update โ Auto download over Wi-Fi (exact path varies by manufacturer)
- Check for updates now: Check for Android updates
Lock all your devices with a password, PIN, or biometrics
Without a lock screen, anyone who picks up your device has instant access to your accounts, files, and messages.
Mac:
- Apple menu โ System Settings โ Touch ID & Password
- Set a unique device passcode or password
Windows:
- Settings โ Accounts โ Sign-in options
- Configure Windows Hello
iPhone / iPad:
- Settings โ Face ID & Passcode (or Touch ID & Passcode) โ Turn Passcode On
- Set a passcode on iPhone
Android:
- Settings โ Security โ Screen lock
- Set screen lock on an Android device
Set automatic screen lock
A device left unattended but unlocked is just as exposed as one with no password at all. Auto-lock ensures the protection actually kicks in.
Mac:
- Apple menu โ System Settings โ Lock Screen, then set "Start Screen Saver when inactive" and enable "Require password after screen saver begins or display is turned off."
- Change Lock Screen settings on Mac
Windows (Set screen/sleep timeout + screensaver with lock-on-resume):
- Step 1: Sleep/screen off timeout:
- Settings โ System โ Power & battery โ Screen, sleep & hibernate timeouts
- Power settings in Windows
- Step 2: Lock on screensaver (requires password on resume):
- Settings โ Personalization โ Lock screen โ Screen saver settings
- Configure a screen saver in Windows
iPhone / iPad:
- Display & Brightness โ Auto-Lock, then choose a length of time.
- Set when iPhone locks automatically
Android:
- Settings โ Display โ Screen timeout (exact path varies slightly by manufacturer)
- Set screen lock on an Android device
Check & install security software
Malware and ransomware can silently steal data or lock you out of your own files. Security software catches threats before they cause damage.
Mac: XProtect (built-in, automatic)
- MacOS includes built-in antivirus technology called XProtect for signature-based detection and removal of malware. Apple issues updates automatically โ by default, macOS checks for these daily. No action needed; it runs silently in the background.
- For more info - Apple support page
Windows: Microsoft Defender (built-in, free)
- Microsoft Defender is already built into Windows 10 and 11.
- To check if it's enabled: Start โ Settings โ Update & Security โ Windows Security โ Virus & threat protection. Under "Virus & threat protection settings", select Manage settings and check that Real-time protection is set to On.
- Microsoft support official guide
iPhone / Android
- Both platforms have strong built-in security. Apple's App Store and Google Play both vet apps for malware, and neither platform officially recommends or supports third-party antivirus apps. No action needed.
Want extra protection? (optional)
If your organisation requires additional security software beyond the built-in tools, here are 2 install guides:
- How to Install and set up Bitdefender App on macOS
- How to install your Bitdefender security solution on Windows
- Malwarebites quick start guide (Mac & Windows)
Enable disk encryption
If your device is lost or stolen, encryption makes your files completely unreadable to anyone who doesn't have your password.
Mac (FileVault):
- Check if it's already on: Apple menu โ System Settings โ Privacy & Security โ scroll down to FileVault.
- Protect data on your Mac with FileVault
Windows (BitLocker / Device Encription):
- Windows Pro, Enterprise, and Education: BitLocker
- Important: once enabled Bitlocker, make sure to back up your recovery key โ without it you can lose access to your data.
- Windows Home: Device Encryption
- Check if it's already on: Go to Settings โ Privacy & Security โ Device encryption. If Device Encryption is turned off, turn it On.
Set your device's recycle bin to delete files automatically after 30 days
Automatic deletion ensures sensitive data doesn't linger there indefinitely.
- Mac: Automatically remove items from the Bin after 30 days
- Windows: Delete files automatically on Windows (recycle bin + downloads folder)