Home security levels

A simple maturity scale, modeled on the ones used for businesses. Every assessment states where the home is now and the level we are aiming for.

What the levels cover

• Network: router, Wi-Fi, segmentation and remote access.
• Devices: computers, phones, tablets, smart devices and cameras.
• Accounts: email, banking, cloud storage, shopping and the apps that run the home.
• Physical security: cameras, alarms, locks and access.

Each area is scored separately; the plan raises the weakest first.

The five levels

1. Level 1: Exposed

   Defaults in place and known gaps open.

   Example: The router has its factory password, passwords are reused, and nothing is backed up.

2. Level 2: Basic

   The common gaps are closed.

   Example: Devices update automatically, each account has its own password in a password manager, and photos and documents have a second copy.

3. Level 3: Protected

   Important accounts have a second sign-in step, and the network is segmented.

   Example: Email, banking and cloud accounts use a second step. Smart devices and cameras sit on their own network, away from computers and phones.

4. Level 4: Tested

   The protections have been exercised, not just configured.

   Example: A backup has been restored as a test, account recovery has been tried, and everyone in the household knows the verification rule for unexpected requests.

5. Level 5: Managed

   Someone keeps it at that level as the home changes.

   Example: Scheduled reviews, new devices brought into the plan on arrival, retired devices wiped, and a written report each time.

Moving up

Most homes start at level 1 or 2 and reach level 3 in the first engagement. Levels 4 and 5 come from testing and ongoing care. See the plans.