Free Assessment

Free 5-Minute Cybersecurity Self-Assessment

Answer 10 questions. Get your risk score instantly. No email required to see results.

Instant Risk Score

10 Quick Questions

No Email Required

~5 minutes · No sign-up · Results on screen

Question 1 of 10

Do you enforce multi-factor authentication (MFA) on all critical accounts (email, cloud, banking)?

Yes, on all critical accounts Yes, but only on some accounts No, passwords only Not sure

Question 2 of 10

Do you have automated, tested backups of critical business data?

Yes, automated and tested regularly Yes, automated but not tested Manual backups only No backups / Not sure

Question 3 of 10

Do you have a documented incident response plan?

Yes, documented and rehearsed Yes, documented but not rehearsed No, we handle incidents ad-hoc Not sure

Question 4 of 10

How quickly do you apply security patches to operating systems and critical software?

Within 7 days of release Within 30 days Within 90 days or when convenient No regular patching schedule

Question 5 of 10

Is endpoint protection (antivirus/EDR) deployed and actively monitored on all devices?

Yes, on all devices and monitored Yes, deployed but not monitored Only on some devices No / Not sure

Question 6 of 10

Do you review and revoke access for departed employees and contractors?

Yes, within 24 hours of departure Yes, within a week Occasionally, when remembered No formal process / Not sure

Question 7 of 10

Do your staff receive regular security awareness / phishing training?

Yes, at least quarterly Yes, annually Only during onboarding No formal training / Not sure

Question 8 of 10

Are guest and IoT devices separated from your core business network?

Yes, fully segmented Partially, some separation No, everything on one network Not sure

Question 9 of 10

Is sensitive data (laptops, databases, backups) encrypted at rest?

Yes, all sensitive data is encrypted Some, but not consistently No encryption in place Not sure

Question 10 of 10

Do you centrally collect and review security logs for suspicious activity?

Yes, centralized logging with active review Logs collected but rarely reviewed No centralized logging Not sure

Your Results

Calculating...

Enter your email and we'll send a personalised assessment summary with recommendations and next steps. No spam, unsubscribe anytime.

No obligation · Australian-owned · Global clients