Give actions an owner.

Choose an answer, assign a person and record the evidence you need. Unknown means unanswered, not insecure. Your entries stay in this page’s memory; refreshing clears them. Downloads stay wherever you save them.

Use these questions on paper: Who verifies urgent requests? Who owns email authentication and MFA? Who reviews account recovery? Who verifies website updates? Assign an owner, answer known/unknown and request evidence.

Bring the right evidence.

Ask for a dated configuration summary or provider confirmation. Do not paste credentials, recovery codes, customer records or private account screenshots into this tool. A completed checklist is a planning record, not certification.