DDoS Readiness Checklist
Prepare your business for a DDoS attack with this practical checklist.

Preparation determines how quickly you recover from a DDoS attack. Use this checklist to assess your readiness.
Know your critical services
- List public-facing services: websites, portals, APIs, VPN gateways, mail servers.
- Identify their IP addresses and hosting locations.
- Rank them by business impact.
Protection in place
- Confirm DDoS protection covers your internet links and critical IP addresses.
- Use a CDN or cloud protection for websites.
- Deploy a web application firewall for application-layer attacks.
Baselines and monitoring
- Understand normal traffic levels for each service.
- Set up monitoring and alerts for unusual spikes.
Contacts and escalation
- Keep provider security and NOC contacts readily available.
- Document internal roles: who decides, who communicates, who works technically.
Response plan
- Write a simple playbook covering detection, notification, mitigation and communication.
- Include steps for switching to backup services if needed.
Communication templates
- Prepare messages for customers, staff and partners explaining service disruption.
Infrastructure resilience
- Avoid single points of failure in DNS, hosting and connectivity.
- Use redundant links where possible.
Testing
- Conduct tabletop exercises with your team and provider.
After an attack
- Request incident reports and review lessons learned.
The bottom line
A ready business recovers faster. Work through this checklist with your provider and update it regularly.
Learn more about DDoS Business Protect from UbiFi, or talk to our team.
Always-on DDoS detection and mitigation that keeps your websites, portals and VPNs online during attacks.


