How do I save proof that each security setting is done?

Howy the walrus sealing an envelope with wax

Make one folder for the policy year. As you finish each setting, take a screenshot that shows the setting turned on, which computer or account it's for, and the date. For things that aren't settings, like training or payment checks, keep a dated note or log. Leave client details and passwords out.

Proof is a dated screenshot or note showing each setting is done.

How to set it up

  1. Make a folder called something like Cyber insurance 2026, next to your policy documents.
  2. Take a screenshot when you finish each setting. On Windows, press Windows key + Shift + S. On a Mac, press Shift + Command + 4.
  3. Check the screenshot shows three things: the setting turned on, the computer's name or the account's address, and the date.
  4. If the date isn't on screen, put it in the file name, like 2026-10-05 front-desk-pc bitlocker.png.
  5. Take one per computer or account, not one for the whole business.
  6. For items that aren't settings, write a short dated note instead: your training log, your payment call-back log, your one-page incident plan, your restore test.

What goes in the folder

Item What to save
Two-step sign-in on email The admin page showing it's required, and the list of who's enrolled
Admin and remote access Your admin list, and the remote access settings turned off
Backups The backup tool showing the latest backup date
Restore test A dated note of what you restored and that it opened
Antivirus Windows Security or the Mac's update settings, per computer
Updates Windows Update or Software Update saying up to date, per computer
Encryption BitLocker, Device encryption or FileVault showing on, per computer
Email filtering and DMARC The safety settings page, and a dated email check result
Outside logins Your dated vendor list
Training, payments, incident plan The dated logs and the plan

Each guide in the question-by-question guide ends with what to save for that item. If you run the free check on HowyGuard, Howy's report lists it under "How to show it's true" for each answer.

What to leave out

Crop or scroll past anything private before you take the picture: client or patient names, passwords, recovery keys and sign-in codes.

Common questions

How often should I redo the screenshots?

Once a year, before your renewal, and whenever you add a computer or a staff member.

Can my IT provider send them to me?

Yes. Ask in writing for a dated screenshot of each item, and file what they send.

Should I delete last year's folder?

No. Keep each year's folder with that year's policy.

Sources

  1. Microsoft Support: Use Snipping Tool to capture screenshotssupport.microsoft.com
  2. Apple Support: Take a screenshot on Macsupport.apple.com