Security checklist