Many perceive the Cheklist as a clear and short path to the result. But in the topic of security, successful checklists are rare. Why? On the one hand, the more specific such a list, the denser it is tied to a model of threats of a separate team or person. Detailed safety instructions to the owner of the website on WordPress -why are they to the one who does not have a website? And too general, declarative advice like “Protect your email” for the most part is useless.