Are there good security checklists for (1) personal security to protect one from hacking, identity theft, etc. and (2) businesses that have online services but aren't as tech savvy as a large tech giant that has huge security teams etc.
As for (1), I can directly recommend Personal Security Checklist (https://security-list.js.org/#/README), it has complete, updated and reasonable advice for most people.