Trust & Resilience

New Year's Day: The Quiet Ten-Minute Check

On the quietest morning of the year, ten minutes confirms the business survived the holidays: backups, website, alarms and the accounts that matter.

A spiral notebook, glasses, pen, mouse, earbuds and a succulent on a light beige background.

New Year's morning. The business has been running on the holiday arrangement for a week or more: the on-call list, the daily glance, the freeze on changes. Before the year really starts, ten quiet minutes confirms that everything made it through.

This is not a drill and not a program. It is the owner's walk around the building, done from a kitchen table, on the one morning nobody will interrupt it.

Key takeaways

  • Ten minutes on New Year's morning confirms the holidays went quietly.

  • Check the backup first; everything else is secondary to it.

  • Load the website and the customer-facing systems as a customer would.

  • Look at the alarm and access logs for anything you cannot explain.

  • Write down anything odd, even if it seems small, while it is fresh.

Step 1: Check the backup before anything else

Open the backup console or the provider's email and confirm the last few nights completed. This is the one check that matters most, because the backup is the thing you will desperately want if anything else went wrong over the break.

If December's restore drill happened as planned, you already know the backups are good, and this is a confirmation rather than a hope. If it did not, the December restore drill belongs on January's list, at the top.

Step 2: Visit your own business as a customer

Load the website. Place a test order or submit the contact form if that is how customers reach you. Try the phone system. You are looking for the failures that customers find first and report last.

Two minutes here has saved more than one business from discovering, mid-January, that the contact form had been failing since the 23rd.

Step 3: Glance at the logs that know things

The alarm panel history, the access log if you have one, the sign-in notifications from the accounts that matter. You are not auditing; you are scanning for the thing that does not fit: the 3am login, the door event on a day nobody was in.

Most years there is nothing. The year there is something, you want to find it today, at your leisure, rather than in a worse context later.

Step 4: Write down anything odd, then enjoy the day

Anything that looked wrong, or even slightly off, gets a line in a note with today's date. Small oddities are easy to forget and occasionally important, and the note costs thirty seconds.

Then close the laptop. The check is ten minutes, not a morning. The business made it through the year, and the day belongs to the people in it.

Frequently asked questions

Is checking on a holiday reasonable?

Ten minutes by the owner with coffee is not a burden; it is the price of a relaxed holiday for everyone else. Anything longer can wait for the first working day.

What if the backup did fail?

Do not fix it today. Note it, confirm nothing is currently on fire, and make it the first item on the first working day, with help if needed.

Should staff do this too?

No. This is the owner's walk-around. Staff did their part with the on-call rotation and the daily glance; the first of January is theirs.

A practical next step

Do the ten-minute check this morning, note anything odd, and let the rest of the day be a holiday. If the check turns up something you cannot explain, book a Decision-Clarity Call and start the year with answers.

Next step

Get Board-Ready on AI and Cyber Risk

A 30-minute call. No charge. You'll leave with a clear read on where your oversight stands and what to do about it.

Stop Guessing. Start Scoring
Tyson Martin

Written by Tyson Martin, NACD.DC

Chief Trust, Security & AI Officer. CISO of record at MIO Partners; former CISO & CTO at Lumber Liquidators and Orvis; advisor to 200+ Fortune 500 boards and C-suites at AWS.

See the track record
Keep reading

More on Trust & Resilience

All CISO Insights
Trust & Resilience

What to Do the Monday After a Competitor's Breach

A competitor's public breach is a free lesson. A five-day learning review converts it into an exposure check, a control gap check and a board note.

Trust & Resilience

Who Can See Your Most Sensitive Data Right Now?

Who holds access to your most sensitive data right now - people, service accounts and vendors? If nobody can answer with evidence, that is the finding.