What technical settings cannot show: passwords, backups, payments. A checklist, alone or as a team, and a drill to spot a fake email.
The 10 essential measures, team editionTick what is in place. Nothing is sent: progress stays in this browser. Print the list for your next meeting.
Titles from Cybermalveillance.gouv.fr (read on 2026-10-25) (our translation). The “For your organisation” lines are our suggestions.
Phishing drill
Each email below is a FAKE made for the drill. Tick the 3 real warning signs, then check. Nothing is sent, no score is recorded.
Drill fake email 1From:Direction <direction.urgent@free-mail.example>Urgent and confidentialHello, I am in a meeting and cannot be reached. Please make a €2,400 transfer to the attached supplier today, new bank details. Do not tell anyone for now.Drill fake email 2From:Service abonnements <billing@streaming-account-billing.example>Your subscription will be suspended within 24 hA payment failure is blocking your account. Pay by card through the link [link] before noon tomorrow to keep your access.Drill fake email 3From:Sécurité Messagerie <no-reply@secure-mailbox-check.example>Your mailbox will be closedWe detected unusual activity. Confirm your password here [link] or your mailbox will be deleted.Drill fake email 4From:Remboursements <refunds@ticket-asso-payments.example>€186 refund pendingTo receive the refund for your last purchase, enter the bank details and the code received by SMS at [link].Drill fake email 5From:Comptabilité <compta@exemp1e-services.example>Invoice to payHere is the invoice attached (invoice.zip). Please open it and pay before Friday.Drill fake email 6From:Votre responsable <manager.office@free-mail.example>Small favourCan you buy five €50 gift cards for a team present? Send me the codes in a photo, I will pay you back Monday.