My Business Growth Kit
Explore Kits

Free · 12 questions · about 3 minutes

How exposed is your business?

12 plain-English questions for a business with no IT department. You get a score, your weakest area, and the specific things to fix first — most of which cost nothing.

Your answers never leave this page. Nothing is sent, stored or tracked; the score is worked out in your browser.

Accounts and passwords

1 of 12Does every account that matters — email, bank, domain registrar, payment platforms — have two-factor authentication turned on?
2 of 12Does everyone use a password manager, with a different password for every account?

Phishing and payments

3 of 12Is every change to a supplier's bank details confirmed by phone, on a number you already had rather than one in the email?
4 of 12Would your staff report a suspicious click straight away, knowing nobody gets in trouble for it?

Backups

5 of 12Has somebody restored a file from backup — and opened it — in the last three months?
6 of 12Is at least one backup copy offline, or impossible to delete from your normal login?

When it goes wrong

7 of 12Is there a named person who decides what happens during an incident — including taking systems offline — with a deputy?
8 of 12Is there a printed list of who to call — insurer, bank, technical help — that does not live only on the computers that might be down?

People and access

9 of 12When someone leaves, are all of their accounts switched off on their last day?
10 of 12Does every person have their own login, with no shared accounts?

Devices and network

11 of 12Do computers and phones install security updates automatically?
12 of 12Has the router's admin password been changed from the default, with visitors and smart devices on a separate guest network?

0 of 12 answered