Free quiz · 3 minutes

How ready is your business for a cyber attack?

Twelve yes-or-no questions about the protections that stop most attacks on small businesses. Get a score and a short list of what to fix first. Your answers stay in your browser.

  1. 1Does everyone use two-step login for email and other work accounts?

    A code on your phone stops most account break-ins, even when a password leaks.

  2. 2Are your computers updated automatically, and does someone check that it worked?

    Most attacks use holes that already have a fix. Updates only help if they actually install.

  3. 3Does every computer have business-grade virus and threat protection that someone watches?

    Free antivirus catches old threats. Business tools spot an attack in progress and can stop it.

  4. 4Do you have a backup copy that hackers can't reach or delete?

    Ransomware goes after backups first. A copy kept offline or locked is what saves you.

  5. 5Has your team had security training in the last 12 months?

    Most break-ins start with someone clicking a convincing email.

  6. 6Do people use a password manager instead of reusing passwords?

    One reused password from a hacked website can unlock your email.

  7. 7Do people only have access to the files and systems they need for their job?

    If one account is taken over, limited access limits the damage.

  8. 8Is your office Wi-Fi separate for guests, with the firewall kept up to date?

    A guest phone on your main network, or an old firewall, is an open door.

  9. 9Are laptop drives encrypted so a lost laptop doesn't mean lost data?

    A stolen laptop without encryption can turn into a data breach you have to report.

  10. 10Does your email filter block fake senders and warn about outside email?

    Fake invoices and "urgent" messages from the boss are the most common scams.

  11. 11Do you have a written plan for what to do if you're hacked?

    In the first hour, knowing who to call and what to unplug saves days.

  12. 12Do you have cyber insurance, and do you meet what the policy requires?

    Many claims are denied because the business didn't have two-step login or backups the policy asked for.

Good to know

Questions people ask

Is this a full security assessment?

No. It's a quick self-check of the basics that stop most attacks on small businesses. A Security Risk Check with our team goes deeper and looks at your actual setup.

Where do these questions come from?

They follow the protections most cyber insurance policies ask about, and the basics in government guidance for small businesses, written in plain English.

What does "Partly" count for?

Half credit. "Not sure" counts as no, because a protection nobody can confirm usually isn't there.

Want a second opinion?

Our free Security Risk Check is a 20-minute phone call. We'll tell you plainly what's exposed and what it would take to fix.

Get a free Security Risk Check

More free tools: see them all

Book a 15-minute call

A quick call about your business, your setup and what isn't working. If we're not the right fit, we'll say so.

Pick a day

Times shown in Central Time

Loading open times…