Free self-check

How secure is your small business?

Thirteen quick questions about the basics, in about three minutes.

This is a baseline overview, not a full audit.It is written for business owners and office managers, not IT experts, so answer as best you can. “Not sure” is a perfectly good answer. If we work together, I will do a deeper technical review of your actual setup.

Your answers stay in your browser. They are only sent to me if you choose to include them when you get in touch, and if we don't end up working together, I delete them.

Question 1

01Does every important account (email, Microsoft 365 or Google, banking, accounting) use multi-factor authentication?

Question 2

02Do only two or three trusted people have admin rights?

Question 3

03Are staff blocked from connecting unapproved apps to company email and files?

Question 4

04Is your business email on your own domain, bought directly from Microsoft or Google in your name?

Question 5

05Is your domain registered in your own account, with auto-renew and MFA turned on?

Question 6

06Are SPF, DKIM and DMARC set up on your domain?

Question 7

07Does your team use a password manager instead of browser-saved passwords or spreadsheets?

Question 8

08Is there a backup of your email and files outside Microsoft or Google, and have you tested restoring it?

Question 9

09Are your computers encrypted (BitLocker or FileVault) and installing updates automatically?

Question 10

10Do people use standard, non-admin accounts on their computers day to day?

Question 11

11When someone leaves, is all their access removed on their last day?

Question 12

12Is guest Wi-Fi kept separate from the network your work computers use?

Question 13

13Would you notice if someone added a forwarding rule to your mailbox or signed in from another country?

0 of 13 answered