Two-minute readiness check

Which security questions would your firm fail today?

Ten yes-or-no questions based on what Cyber Essentials assessors, cyber insurers and client questionnaires actually ask. Your answers stay in your browser: no email address, nothing stored.

Question 1 of 10Is multi-factor sign-in switched on for every account, including shared mailboxes and admin accounts?
Question 2 of 10Are leavers' accounts switched off on their last day, every time?
Question 3 of 10Is every laptop and server on software that still gets security updates?
Question 4 of 10Do only the people who need it have admin rights on their own machine?
Question 5 of 10Are SPF, DKIM and DMARC set up, with DMARC set to enforce rather than just monitor?
Question 6 of 10Do you know everything your firm has reachable from the internet?
Question 7 of 10Do you have a backup copy that ransomware on your network couldn't also reach?
Question 8 of 10Has an independent party tested your systems in the last 12 months?
Question 9 of 10Were the findings from your last test fixed and re-tested?
Question 10 of 10Could you answer an insurer's question about regular vulnerability scanning with evidence?

0 of 10 answered

Your result

This is a self-check, not a test. It shows where questions are likely to come up, not what an attacker would actually find.