Stabilise first
Stop the bleeding before adding anything new: backups, MFA and endpoint protection. A short, focused remediation plan is more valuable than a large transformation project.
Seven questions. About two minutes. No email required. You will get an instant score and a practical list of what to fix first.
Think about servers, shared files, email and the laptops staff actually work on.
MFA asks for a second proof — an app code or security key — after the password.
This covers operating systems, browsers, applications and network devices.
Endpoint protection covers laptops and desktops against malware and ransomware.
Be honest about the first hour, not the ideal process.
Accounts, systems, vendors, network configuration and recovery steps.
Include Wi-Fi, guest access, the firewall and who looks after them.
This self-assessment is a guide, not an audit. A proper review looks at configuration, permissions and evidence — not just intentions.
Your answers stay in your browser. Nothing is sent or stored.
A score is only useful if it leads to a next step. Here is how we would approach each band.
Stop the bleeding before adding anything new: backups, MFA and endpoint protection. A short, focused remediation plan is more valuable than a large transformation project.
You have foundations. The priority is consistency — patching, restore tests, monitoring and documentation — so a single missed step cannot become an incident.
Shift from maintenance to roadmap: tested recovery, periodic security review and IT investment aligned with where the business is going.
We will review your actual setup — backups, accounts, network and devices — and give you a prioritised list with costs. No obligation to proceed.