Plumbing & HVAC Owner IT Risk Checklist (30 YES/NO Questions)

Name: ELBO Computing Resources
Address: 201 N Minnesota Ave, Sioux Falls, SD, 57104
Telephone: 605-361-3720
Rating: 4.9

A quick owner-ready self-assessment across email security, backups, devices, networks, AI use, and organizational readiness.

Check YES only. Unchecked = NO.

Download the Printable Toolkit

Download Printable Checklist (PDF)

Download Printable Top Fixes First (PDF)

Web HVAC Risk Checklist

How to use (2 Minutes)

Check YES only (unchecked = NO)
Answer honestly; your score updates automatically
Circle your top 3 “NOs” that would hurt most (downtime/fraud/recovery)

Email & Identity Security

We require multi-factor authentication (MFA) for all email accounts

Owners and admins use MFA everywhere it is available

Employees use unique passwords (no sharing)

We provide phishing awareness training at least annually

Microsoft 365 security settings have been reviewed within the last 12 months

If any NO (unchecked): Email compromise and payment-fraud risk is elevated.

Backup, Recovery & Continuity

We have backups of critical systems and data

Backups are tested regularly with real restores

We know how long it would take to restore operations

We have a written incident response plan (even a 1-pager)

Our cyber insurance security requirements have been confirmed and are currently met

If any NO (unchecked): Ransomware recovery risk is elevated.

Devices & Endpoint Protection

All company computers have managed security software

Field tablets/phones accessing company data are managed

Lost or stolen devices can be remotely wiped

Old or unsupported computers have been replaced

Workstations are built from a standard company image

If any NO (unchecked): Endpoint exposure is elevated.

Network & Infrastructure

Business-grade firewall and networking equipment is in place

Guest Wi-Fi is separated from business systems

Our network is monitored for issues and threats

Core business apps are intentionally selected and documented

Remote access to company systems is secured

If any NO (unchecked): Network risk is elevated.

Artificial Intelligence Use (New Risk Area)

We have guidelines for employee AI tool usage

Staff know not to paste customer data into public AI tools

AI-generated content is reviewed by a human before sending

Leadership understands where AI is currently being used

We evaluate AI tools before adopting them

If any NO (unchecked): AI-related data and reputation risk is growing.

Organizational Readiness

More than one person understands our IT environment

Key systems and credentials are documented securely

We have a clear IT support partner or plan

Technology decisions are reviewed at least annually

IT risk is discussed as part of business planning

If any NO (unchecked): Operational resilience is reduced.

Your Score:

0 / 30

—

Selections aren’t saved if you leave this page. Use the PDFs above if you want a copy to print/share.

What to do next (Start Here)

If you’re not sure where to begin, prioritize these first:

Turn on MFA everywhere (email first)
Test a real restore (prove backups work)
Secure remote access for staff and vendors

Want the full “Top Fixes First” one-pager? Download it above.

FAQ (Quick answers)

Do we really need MFA everywhere?

Yes. Start with email and admin accounts.

What does it mean to “test backups”?

Do a real restore and time how long recovery takes.

Can employees use ChatGPT/AI tools at work?

Yes, with guardrails. Don’t paste customer data, credentials or payment info into public tools.

Want the full expanded answers? Download the toolkit above.

Questions?

If you have a quick question while working through the checklist, you’re welcome to reach out.
Call 605-361-3720 or contact us online.

If you're curious: How ELBO supports HVAC and plumbing businesses (4 fundamentals)

The Sioux Falls area's most trusted business IT service & support

Need tech support in Sioux Falls now? Call 605-361-3720

ELBO Computing Resources

Local business IT solutions that deliver peace of mind