Free Checklist Templates for Information Technology

Information Technology

OR

Cloud Outage Response

Detection & Verification

Acknowledge and log alert

Verify cloud provider status

Set severity (SEV-1/2/3)

Validate monitoring integrity

Enter Incident ID

Internal Communication

Assign incident roles

Create Slack incident channel

Escalate to leadership (SEV-1/2)

Start an internal status doc

Customer Communication

Draft customer status message

Product manager and CTO approve status message

Publish status page update

Notify in-app users via Intercom

Mitigation & Monitoring

Apply mitigations

Monitor provider recovery

Validate recovery

Product team updates users via Intercom

Post-Incident Review

Document timeline and lessons learned

Update workflow and templates

Schedule team debrief

Collect MTTA / MTTR metrics

Confirm all users notified

View Workflow Use Workflow

Data Backup Verification Checklist

Backup Coverage and Configuration Review

Reconcile protected assets against the CMDB

Confirm 3-2-1 coverage for critical systems

Validate RPO and RTO targets per tier

Review backup job schedules and retention

Job Health and Encryption

Review last 30 days of backup job results

Open tickets for failing backup jobs

Verify encryption at rest and in transit

Confirm immutability and air-gap controls

Rotate backup service account credentials

Restore Testing

Select random sample for spot-restore

Perform file-level restore to isolated location

Perform VM-level instant recovery test

Record restore times against RTO targets

Run quarterly full DR failover tabletop

Remediation and Escalation

Escalate restore failures to engineering lead

Trigger seed reload from offsite copy

Re-run failed jobs after remediation

Capacity and Documentation

Review repository capacity and growth

Apply retention and legal-hold policies

Update runbooks and asset documentation

File evidence package for SOC 2 or ISO audit

View Workflow Use Workflow

Desktop Configuration Checklist

Hardware Provisioning

Record asset tag and serial number

Inspect peripherals against the order

Stage docking station and monitors

Verify printer and scanner connectivity

OS Image and Software Baseline

Enroll device in MDM via zero-touch

Re-image and re-enroll the device

Apply standard configuration profile

Install Microsoft 365 and core apps

Deploy role-specific software

Identity and Access

Provision IdP account and SSO

Enroll FIDO2 hardware key

Assign IdP groups by role

Map shared drives and Git repos

Security Baseline

Confirm EDR agent is healthy

Remediate EDR agent issues

Verify disk encryption recovery key escrow

Apply patch baseline and reboot

Validate VPN and ZTNA posture

Handoff and Documentation

Walk the user through first login

Update CMDB and IT Glue records

Sign off the configuration package

Schedule the 30-day check-in

View Workflow Use Workflow

Disaster Recovery Checklist

Safety and Scene Preservation

Confirm all personnel are accounted for

Preserve forensic evidence on affected hosts

Classify the disaster type

Damage Assessment

Activate the IR bridge and assign roles

Inventory affected systems against the BIA

Set the declared RTO and RPO targets

Decide whether to invoke insurance and counsel

Containment and Forensics

Isolate compromised hosts at the network layer

Rotate credentials and revoke active sessions

Engage the IR firm for forensic imaging

System Recovery

Validate backup integrity before restore

Stand up infrastructure from IaC

Restore data to recovery infrastructure

Engage alternate procurement for hardware loss

Validate functionality and performance

Stakeholder Communication

Notify executives and incident sponsor

Issue the customer-facing status page update

Send regulatory breach notifications

Postmortem and Lessons Learned

Capture the incident timeline

Hold a blameless postmortem review

File remediation tickets with owners and due dates

Update the DR runbook and BIA

View Workflow Use Workflow

Incident Response Checklist

Detection and Triage

Open the incident in PagerDuty

Classify severity (P1-P4)

Validate the alert is not a false positive

Determine if this is a security incident

Investigation and Scoping

Assign incident commander, scribe, and comms lead

Preserve volatile evidence before remediation

Pull SIEM and EDR logs for the incident window

Determine the scope of impacted systems and data

Build the incident timeline

Containment

Isolate affected hosts via EDR network containment

Revoke compromised credentials and active sessions

Block IOCs at the firewall and DNS layer

Eradication and Recovery

Remove malware and persistence mechanisms

Patch the exploited vulnerability

Restore impacted services from clean backups

Verify containment is complete before bringing systems online

Notification and Regulatory Reporting

Engage legal and privacy counsel

File regulatory breach notifications within required windows

Notify impacted customers and partners

Postmortem and Improvement

Schedule the blameless postmortem

Document root cause, MTTD, and MTTR

File action items with owners and due dates

Update the IR runbook with lessons learned

View Workflow Use Workflow

Monthly Server Maintenance Checklist

Run Setup and Server Identification

Capture server hostname and role

Record management IP and out-of-band address

Record primary NIC MAC and rack location

Confirm change ticket and maintenance window

Backup and Restore Verification

Verify the last backup job in Veeam or Datto

Run a test restore from the latest snapshot

Confirm offsite immutable copy retention

Open a P2 remediation ticket for the failed backup

OS, Firmware, and Application Patching

Cross-reference pending patches against CISA KEV

Apply OS, firmware, and agent patches

Patch hosted applications and the control panel

Roll back the failing patch and notify owners

Capacity and Database Maintenance

Run database integrity check

Rebuild fragmented indexes and reclaim disk space

Review CPU, RAM, disk, and network trends

Security Review

Rotate service account credentials in the vault

Run an authenticated vulnerability scan

Review privileged accounts and EDR alerts

Hardware and Facility Inspection

Inspect PSUs, fans, and chassis LEDs

Check RAID controller and disk health

Order a replacement drive and escalate to vendor support

Verify rack temperature and HVAC status

Sign-Off and Reporting

Record maintenance summary and outstanding issues

View Workflow Use Workflow

Monthly Server Maintenance Checklist

Server Room Environment

Verify temperature and humidity in the server closet

Test the UPS battery load and runtime

Inspect rack airflow and cooling fans

Operating System and Patching

Apply OS security patches in the maintenance window

Review system event logs for critical errors

Reconcile configuration drift via Ansible or Terraform

Reboot hosts in the maintenance window

Database Health

Run DBCC CHECKDB or pg_amcheck integrity scan

Verify nightly database backup jobs completed

Open a P2 incident for the failed database backup

Rebuild fragmented database indexes

Network and Firewall

Review firewall rule changes since last cycle

Test the site-to-site VPN failover path

Verify switch and AP uptime in Auvik

Endpoint and Server Security

Confirm EDR agents reporting in the CrowdStrike console

Run an authenticated vulnerability scan against servers

Review privileged account session logs in the PAM vault

Backup and Recovery Verification

Verify the last full backup job in Veeam

Open a P2 incident for the failed backup job

Perform a spot-restore from a random backup set

Escalate the failed restore to vendor support

Hardware Health and Sign-Off

Check RAID array status and SMART disk health

Review IPMI logs for hardware faults

Sign off on the monthly maintenance window

View Workflow Use Workflow

Network Maintenance Checklist

Pre-Maintenance Preparation

Review the change advisory queue

Confirm the maintenance window with stakeholders

Snapshot current device configurations

Patching and Firmware

Review the current KEV and CVSS queue

Apply firmware updates to network appliances

Push OS patches via the RMM

Confirm patch deployment success

Remediate non-compliant endpoints

Security and Vulnerability Review

Run authenticated vulnerability scan

Review EDR alerts and unresolved detections

Audit firewall rules and ACL hits

Review privileged access and break-glass accounts

Assess critical findings

Open a P2 incident for critical findings

Performance and Capacity

Pull bandwidth and latency baselines

Review WAN and VPN tunnel health

Verify DNS and DHCP scope health

Record capacity findings

Backup and Recovery Verification

Confirm last 30 days of backups completed

Perform a random spot restore

Open a P2 ticket for backup failure

Documentation and Sign-Off

Update IT Glue / Hudu network documentation

Record monthly maintenance sign-off

View Workflow Use Workflow

Onboarding a New Software Developer

Pre-Start Setup

Capture start date, role, and team

Image and enroll the laptop in MDM

Create the IdP account with SCIM groups

Order a FIDO2 hardware key

Refresh the dev onboarding runbook

Assign a mentor from the product team

Day One Provisioning

Enroll the hardware key in the IdP

Verify the EDR agent is reporting

Add to PagerDuty and Slack channels

Walk SSO into baseline SaaS

Troubleshoot SSO and SCIM gaps

First Week Engineering Access

Provision GitHub org and repo access

Grant cloud IAM via SSO role mapping

Stand up the local dev environment

Pair with the mentor on a first PR

Shadow the on-call rotation

30-Day Access Review

Run an access review against the IdP

Hold the 30-day manager check-in

Remediate flagged provisioning gaps

View Workflow Use Workflow

Patch Management Checklist

Patch Identification & Prioritization

Pull this month's CVE feed

Cross-reference against the CISA KEV list

Score and rank patches by risk

Trigger emergency out-of-band cycle

Map patch dependencies and reboot requirements

Change Management Approval

Draft the RFC for CAB review

Present at the change advisory board

Notify users of the maintenance window

Staging & Pilot

Deploy patches to the staging ring

Run application compatibility tests

Deploy to the pilot user group

Triage pilot-stage failures

Production Deployment

Verify backup and snapshot integrity

Deploy patches via the production rings

Monitor RMM and EDR during rollout

Execute the rollback runbook

Post-Patch Validation

Re-scan with the vulnerability scanner

Validate critical service health

Capture evidence for compliance

Update the runbook with lessons learned

View Workflow Use Workflow

Performance Monitoring Checklist

Infrastructure & Host Monitoring

Review host CPU, memory, and disk saturation

Verify autoscaling group health and capacity

Reconcile Terraform state for drift

Open remediation tickets for drifted resources

Confirm patching SLA on managed endpoints

Application & Service SLO Review

Review SLO burn rate and error budget

Trigger error-budget freeze review

Inspect APM traces for p95 / p99 regressions

Triage top error signatures from Sentry

Validate synthetic checks and uptime probes

Database & Data Tier

Review slow query log and top-N queries

Check replication lag and replica health

Verify last successful backup and restore test

Audit storage capacity and growth trend

Network & Edge

Review WAN latency, jitter, and packet loss

Inspect firewall and NGFW deny logs

Verify VPN tunnel and ZTNA gateway uptime

Check certificate expiry across edge services

Security Telemetry

Review EDR alerts and unresolved detections

Audit privileged access and break-glass usage

Verify SIEM ingestion across log sources

Review KEV-listed CVEs against current inventory

Sign off on the weekly monitoring report

View Workflow Use Workflow

Quarterly Security Review Checklist

Security Governance & Policy

Review InfoSec policies against CIS Controls v8

Confirm the InfoSec RACI matrix

Tabletop the incident response runbook

Run the quarterly risk assessment review

Schedule a risk treatment session with the CISO

Network Security Controls

Audit the NGFW rule base for stale ACLs

Verify TLS 1.2+ on internet-facing endpoints

Validate WPA3 and 802.1X on corporate wifi

Review VLAN segmentation between user and prod

Application Security Testing

Run SAST and SCA scans on production repos

Schedule the quarterly penetration test

Confirm patch SLAs for KEV-listed CVEs

Data Protection & Backup

Verify encryption at rest across S3, RDS, and EBS

Run the quarterly access review on sensitive data shares

Execute a backup restore from immutable storage

Open a Sev-2 ticket to remediate the failed restore

Endpoint & Identity Hardening

Audit EDR coverage across enrolled endpoints

Reinstall EDR on uncovered endpoints

Verify FIDO2 enrollment for privileged accounts

Review Tenable critical CVE findings

Audit IAM roles against the least-privilege baseline

Workforce Security & Awareness

Deliver the quarterly phishing simulation

Schedule targeted retraining for repeat clickers

Confirm background check completion for new hires

Audit BYOD device enrollment in MDM

Rotate service account credentials in the vault

View Workflow Use Workflow

Server Configuration Checklist

Hardware and Platform Sizing

Confirm physical or virtual platform

Verify CPU and memory sizing

Provision storage volumes and RAID

Rack power and rack-and-stack the chassis

Network Configuration

Assign static IP and DNS records

Place server in the correct VLAN

Configure NTP and verify time sync

OS Baseline and Hardening

Install OS from the approved image

Apply CIS Benchmark hardening

Apply current OS patches

Disable unused services and ports

Identity, Access, and Endpoint Security

Join domain or configure SSO

Configure RBAC and sudo policy

Enroll EDR agent

Configure host firewall rules

Enable disk encryption

Application and Data Layer

Install application runtime and dependencies

Configure database engine if applicable

Install TLS certificates

Monitoring, Backup, and Handoff

Install monitoring and log shipping agents

Define alerts and on-call routing

Configure backup job and verify a restore

Run a vulnerability scan against the new host

Sign off and hand to operations

View Workflow Use Workflow

Server Maintenance Checklist

Hardware Health

Inspect chassis fans, PSU, and cabling

Review disk space and growth trends

Expand or remediate the full volume

Verify RAID and SMART status

Check CPU, memory, and thermal metrics

OS and Application Patching

Review system and application logs

Reconcile pending OS updates against Patch Tuesday

Audit installed packages against the baseline

Verify application and runtime versions

Security Posture

Verify EDR agent health and definitions

Review firewall and security-group rules

Run the vulnerability scan and triage by KEV/EPSS

Audit local accounts and privileged access

Backup and Recovery Verification

Confirm last successful backup job

Investigate and re-run failed backup jobs

Verify offsite and immutable copy

Perform a spot-check restore

Escalate the failed restore to the IT lead

View Workflow Use Workflow

Software Installation Checklist

Pre-Install Review

Open or link the change ticket

Confirm license entitlement and seats

Classify the change risk level

Submit to CAB for review

System Readiness

Verify OS and hardware against vendor requirements

Confirm free disk and required runtime libraries

Validate network paths and firewall rules

Take an MDM-managed restore point

Package and Deploy

Download the installer from the vendor source

Validate the installer hash and code-signing certificate

Escalate the hash mismatch to security

Pilot the install on the test ring

Roll out to the production ring

Post-Install Configuration

Apply the hardened configuration baseline

Wire up SSO and SCIM provisioning

Move credentials into the secrets vault

Run the smoke test

Closeout and Documentation

Execute the rollback plan

Update the CMDB and IT Glue records

Notify end users and update the runbook

Close the change ticket

View Workflow Use Workflow

Software Update Checklist

Pre-Update Assessment

Pull release notes and CVE references

Map dependent services and integrations

Run the update in staging end-to-end

Document the maintenance window blast radius

Change Approval & Scheduling

Submit the RFC to the change advisory board

Address CAB feedback and resubmit

Notify stakeholders of the maintenance window

Confirm on-call coverage and escalation paths

Backup & Rollback Preparation

Snapshot the system and verify backup integrity

Document the rollback procedure

Stage the prior version artifact for fast rollback

Update Execution

Enter the maintenance window and freeze deploys

Apply the update per vendor procedure

Run the smoke test suite

Execute rollback to the prior version

Post-Update Verification & Closeout

Monitor error rates and SLOs for 24 hours

Sign off on the post-update review

Update the CMDB, runbooks, and IT Glue entries

Close the change ticket and notify stakeholders

View Workflow Use Workflow

User Access Control Checklist

Access Request and Approval

Open the access request ticket

Capture business justification and target systems

Route to the people-manager for approval

Get resource-owner approval for sensitive systems

Identity Verification and Provisioning

Verify identity against the HR system of record

Provision the IdP account via SCIM

Enroll the user in phishing-resistant MFA

Issue a FIDO2 hardware key

Role Assignment and Privileges

Assign the IdP group from the RBAC matrix

Configure resource-specific roles in target systems

Check for separation-of-duties conflicts

Set a time-bound expiration on contractor access

Enroll privileged credentials in the PAM vault

Monitoring and Audit Trail

Enable session logging to the SIEM

Configure alerts on sensitive resource access

Attach provisioning evidence for SOC 2

Notify the user of security obligations

Periodic Review and Recertification

Schedule the quarterly access review

Run the access certification campaign

Document the review outcome

Remediate access flagged in the campaign

View Workflow Use Workflow

Vulnerability Intake Checklist

Identify Vulnerability

Gather detailed information about the vulnerability

Determine the source of the vulnerability report

Assess initial severity and potential impact

Check if the vulnerability has been publicly disclosed

Verify if similar vulnerabilities have been previously identified

Evaluate Impact

Identify affected systems or components

Estimate the potential business impact

Determine the need for immediate mitigation

Evaluate the risk to customer data and privacy

Consult with stakeholders for risk assessment

Prioritize and Assign

Categorize the vulnerability based on severity

Assign responsibility to relevant team members

Set deadlines for investigation and remediation

Ensure resources are available for addressing the issue

Update stakeholders on prioritization decisions

Remediate and Test

Develop a remediation plan

Implement necessary patches or configurations

Test the solution in a controlled environment

Verify the effectiveness of the remediation

Document the remediation process and outcomes

Communicate and Review

Inform relevant stakeholders of the resolution

Share lessons learned across teams

Conduct a post-mortem analysis

Update vulnerability management protocols

Prepare a report for future reference

View Workflow Use Workflow

Ready to take control of your recurring tasks?

Start Free 14-Day Trial

Use Slack? Sign up with one click

With Slack

Company

About
Product Roadmap
API Reference
Privacy Policy
Terms
Contact Us
Blog

Resources

Help
Getting Started Guides
Video Center
Demos
Your Account
Use Cases
Pricing

©Manifestly 2026

When you visit or interact with our sites, services or tools, we or our authorised service providers may use cookies for storing information to help provide you with a better, faster and safer experience and for marketing purposes.