Free Cybersecurity Self-Check for Small Businesses

Introduction

Cybersecurity baseline review

See where silent risk may be hiding.

This self-check reviews access and identity, infrastructure and data, and readiness and response. Select the answer that most closely reflects your current environment.

Important: This is an educational screening tool, not a formal assessment, audit, certification, compliance determination, penetration test, or guarantee of security.

Start the self-check

Access and Identity

Who actively manages your daily IT security and compliance?

A dedicated, trusted IT/security providerWe manage it ourselves or “our guy handles it”Not sure

Access and Identity

Does everyone on your team have their own unique login, or do you share accounts?

Everyone has unique loginsWe share some loginsNot sure

Access and Identity

Are former employees immediately locked out of all company systems the day they leave?

Always, immediatelyUsually, but it takes a few daysRarely or there is no formal checklist

Access and Identity

Is multi-factor authentication enforced on all critical applications containing client data?

Yes, everywhereOnly on some applicationsNo or not sure

Infrastructure and Data

Does your staff use unique, strong passwords instead of reusing them?

Yes, enforced by policy and a password managerWe try to, but people reuse passwordsNo or not sure

Infrastructure and Data

Are all computers and software automatically updated with the latest security patches?

Yes, fully automatedWe update them when we rememberNot sure

Infrastructure and Data

Have you tested your backups recently to prove that you could recover your data?

Yes, tested regularlyWe have backups but have not tested a restoreNo, not sure, or no backups

Infrastructure and Data

Do you use any unsupported or outdated software to run daily operations?

No, everything is modern and supportedYes, a few legacy programsNot sure

Readiness and Response

Has your team received training on how to identify targeted phishing emails and invoice scams?

Yes, ongoing trainingWe completed training once a while agoNever or not sure

Readiness and Response

If you were hit by a ransomware attack today, do you have a documented recovery plan?

Yes, a clear written planSort of, but it is not written downNo idea what we would do

Your baseline is ready

Enter your information to view your results.

Your score, risk category, and recommended next steps will appear immediately.

First nameLast nameBusiness nameBusiness email

acknowledgmentI understand this self-check is educational guidance and not a formal cybersecurity assessment, audit, compliance determination, certification, penetration test, or guarantee of security.marketing_consentSend me occasional cybersecurity and compliance guidance from Smart Biz iT.

By submitting, you agree to the Privacy Policy.

Your cybersecurity baseline

0/10

Result

Access and Identity0/4

Infrastructure and Data0/4

Readiness and Response0/2

Recommended next actions

This result is based only on the answers submitted and does not establish that systems are secure or compliant.

Book a Compliance Clarity Call Retake the self-check

Back Continue

Thank you! Your submission has been received!

Oops! Something went wrong while submitting the form.

Find Hidden Cybersecurity Gaps in About Three Minutes

See where silent risk may be hiding.

Who actively manages your daily IT security and compliance?

Does everyone on your team have their own unique login, or do you share accounts?

Are former employees immediately locked out of all company systems the day they leave?

Is multi-factor authentication enforced on all critical applications containing client data?

Does your staff use unique, strong passwords instead of reusing them?

Are all computers and software automatically updated with the latest security patches?

Have you tested your backups recently to prove that you could recover your data?

Do you use any unsupported or outdated software to run daily operations?

Has your team received training on how to identify targeted phishing emails and invoice scams?

If you were hit by a ransomware attack today, do you have a documented recovery plan?

Enter your information to view your results.

Result

Recommended next actions