DEFENSE GRIDTECHNOLOGIES
Home/Security Self-Check
Free self-check

How exposed is your business?

15 yes-or-no questions, about three minutes. You'll get a score and your top risks in plain English. Your answers stay in your browser unless you choose to send them to us.

Answer for your business as it is today. "Not sure" counts as a gap, because it usually is one.

1Does everyone use multi-factor authentication (a code or app prompt) to sign in to email and cloud apps?
2Is your important data backed up somewhere separate from your office, like a secure cloud backup?
3Have you successfully restored files from a backup in the last six months?
4Is your Microsoft 365 or Google Workspace data (email, OneDrive, SharePoint, Drive) backed up separately?
5Does every computer run security software that someone actively monitors for alerts?
6Are Windows, macOS, and business apps updated automatically, usually within a couple of weeks?
7Are all computers running a supported operating system (for example, no Windows 10 machines)?
8Is remote access only through a secure method, with nothing like Remote Desktop open directly to the internet?
9Do you confirm any request to change bank details or send an urgent payment by calling a known phone number?
10Do staff use everyday accounts without administrator rights, with admin access limited to a few people?
11Does your team use a password manager instead of reusing or writing down passwords?
12Has your team had security awareness training, such as spotting phishing, in the last 12 months?
13When someone leaves, is all of their access removed on their last day?
14If you were hacked tomorrow, do you know exactly who to call and what to do first?
15Do you know which regulations or contract requirements apply to your data (such as HIPAA, PCI DSS, or CMMC), and are you meeting them?