Website maintenance schedule

A website is an operating system for your business, not a one-time brochure. This checklist separates urgent updates from routine checks so an owner, employee or developer can see what was done and when.

Start with ownership. Record who controls the domain, hosting, analytics, forms and source code. If that is unclear, use our website handoff checklist before setting a maintenance rhythm.

After every content change

Open the changed page on a phone and desktop. Test links, forms, confirmation messages and any download. Check heading order, keyboard focus, image alternatives and readable contrast. Record what changed, who approved it and how to reverse it.

Monthly

Install supported CMS, plugin and dependency security updates. Back up first and test the customer path afterward. Submit every public form and confirm delivery reaches the right monitored inbox. Review uptime, unusual traffic, security alerts and expiring certificates. Remove stale promotions, staff details, hours and unavailable offers.

Quarterly

Restore a backup in a safe environment instead of assuming the backup works. Review administrator accounts, permissions and multi-factor authentication. Run automated accessibility checks, then keyboard and screen-reader spot checks on key paths. Check analytics against business goals and improve weak customer journeys.

Annually or when providers change

Confirm domain, hosting and software renewals, billing contacts and recovery methods. Replace unsupported components and document the upgrade plan. Review privacy, accessibility, terms and retention practices with qualified advisers where needed. Export credentials, source, assets and operating notes using the handoff checklist.

Simple maintenance record

Field	What to record
Date and owner	Who performed and who approved the work
Change	Page, service or dependency changed
Checks	Forms, devices, accessibility and customer path tested
Rollback	Backup location or commit that restores the prior version
Next review	A specific date and responsible person

Why these checks are here

The Canadian Centre for Cyber Security recommends applying patches quickly, enabling automatic updates where appropriate, replacing unsupported software and testing updates because they can have unexpected effects. Its website guidance also calls for monitoring and patching content-management systems, web applications and plugins.

Ontario's accessibility guidance recommends combining automated tools, assistive technology and user testing, keeping records of resolved issues, and planning how a website will be maintained.

Sources reviewed October 13, 2026. This checklist is operational guidance, not legal or security advice.

Need a maintenance owner?

Harbour & Main created and publishes this guide. We build and maintain small-business websites in Windsor-Essex. Ask about a maintenance plan, or use this schedule with any provider.