Do employees use their own individual accounts instead of sharing logins?
Please select your answer
Yes
Partially
No
Not Sure
Is multi-factor authentication (MFA) turned on for business email?
Please select your answer
Yes
Partially
No
Not Sure
Is MFA required when employees connect to company systems remotely?
Please select your answer
Yes
Partially
No
Not Sure
When someone leaves the company, are their accounts promptly disabled?
Please select your answer
Yes
Partially
No
Not Sure
Is access to administrator or powerful accounts limited to people who need it?
Please select your answer
Yes
Partially
No
Not Sure
Are company computers protected by business-grade security software?
Please select your answer
Yes
Partially
No
Not Sure
Are computers and important business applications kept up to date with security fixes?
Please select your answer
Yes
Partially
No
Not Sure
Do you keep track of the computers, servers, and other devices used for business?
Please select your answer
Yes
Partially
No
Not Sure
Are your firewall and network protections maintained and securely configured?
Please select your answer
Yes
Partially
No
Not Sure
Do you have a way to identify and address security problems with company devices and software?
Please select your answer
Yes
Partially
No
Not Sure
Are important business files and systems backed up automatically?
Please select your answer
Yes
Partially
No
Not Sure
Are backups protected so a cyberattack on your main systems is less likely to affect them too?
Please select your answer
Yes
Partially
No
Not Sure
Have you tested restoring files or systems from backups in the past year?
Please select your answer
Yes
Partially
No
Not Sure
Do you know which business systems and files must be restored first after an outage?
Please select your answer
Yes
Partially
No
Not Sure
Do you have a plan for keeping the business running if important systems go down?
Please select your answer
Yes
Partially
No
Not Sure
Do employees receive cybersecurity awareness training at least once a year?
Please select your answer
Yes
Partially
No
Not Sure
Do employees learn how to spot and report suspicious emails or messages?
Please select your answer
Yes
Partially
No
Not Sure
Do you have a clear way for employees to report a suspected security problem?
Please select your answer
Yes
Partially
No
Not Sure
Do you have written security rules or policies that employees can access?
Please select your answer
Yes
Partially
No
Not Sure
Are new employees given basic security guidance as part of onboarding?
Please select your answer
Yes
Partially
No
Not Sure
Is someone responsible for reviewing security alerts or suspicious activity?
Please select your answer
Yes
Partially
No
Not Sure
Do you have a written plan for what to do if you suspect a cyberattack?
Please select your answer
Yes
Partially
No
Not Sure
Do you know who to contact and who makes decisions during a cyber incident?
Please select your answer
Yes
Partially
No
Not Sure
Does someone periodically review your systems for security weaknesses?
Please select your answer
Yes
Partially
No
Not Sure
Has a qualified IT or cybersecurity professional reviewed your security in the last two years?
Please select your answer
Yes
Partially
No
Not Sure
What best describes your organization?
Please select your answer
Manufacturing
Professional Services
Healthcare
Nonprofit
Construction
Technology
Government Contractor
Other
Approximately how many employees do you have?
Please select your answer
1-10
11-25
26-50
51-100
101-250
250+
What is your biggest cybersecurity concern right now?
Please select your answer
Ransomware
Email/account compromise
Data loss
Compliance
Employee mistakes
Business continuity
Not sure
Do you handle sensitive customer, healthcare, financial, or government data?
Please select your answer
Yes
No
Unsure