Managed IT Services Business Continuity Security Validation About Insights

FR +1 (902) 801-7922 Book a consultation

Managed IT Services Business Continuity Security Validation Starlink About Partners Insights Contact Français Book a consultation

Home/Cyber Risk Check

Free self-assessment

How exposed is your business to a cyberattack?

Answer 13 quick questions to see your risk level and your most important next steps. It takes about three minutes.

AccessIs multi-factor authentication (MFA) turned on for email and all remote access?

Yes Not sure No

Turn on MFA for email, VPN and every admin account. It blocks the large majority of account-takeover attacks.

AccessDo everyday users work without administrator rights on their computers?

Yes Not sure No

Remove local admin rights from daily-use accounts, so malware can't install itself with full control.

AccessDoes your organization use a password manager, with unique passwords everywhere?

Yes Not sure No

Adopt a business password manager and replace reused passwords, starting with email and finance systems.

SystemsAre operating systems and applications patched on a regular schedule?

Yes Not sure No

Put patching on a monthly schedule, and apply critical fixes within days, not months.

SystemsDo all computers and servers have up-to-date endpoint protection that someone monitors?

Yes Not sure No

Deploy managed endpoint protection so alerts are seen and acted on, not just logged.

BackupAre your critical systems backed up automatically, with a copy stored off-site or in the cloud?

Yes Not sure No

Keep at least one automatic backup copy off-site or in the cloud, separate from your network.

BackupHave you tested restoring from backup in the last six months?

Yes Not sure No

Run a restore test. A backup you haven't restored is a backup you can't count on.

BackupIs your Microsoft 365 or Google Workspace data backed up by a separate service?

Yes Not sure No

Add SaaS backup. Providers keep the service running, but protecting your data is your job.

PeopleDoes everyone in your organization receive phishing and security awareness training at least once a year?

Yes Not sure No

Run short, regular phishing awareness training. Most attacks start with an email.

ReadinessDo you have a written plan for what to do in a cyber incident, including who to call?

Yes Not sure No

Write a one-page incident response plan: who decides, who to call, and how to keep operating.

ReadinessIs your email domain protected with SPF, DKIM and a DMARC policy that blocks spoofing?

Yes Not sure No

Set up SPF, DKIM and DMARC, then move DMARC to quarantine or reject so criminals can't send email as you.

ReadinessHave your security controls been tested against real attack techniques in the last year?

Yes Not sure No

Validate your defences with breach and attack simulation, so you know which attacks your tools actually stop.

NetworkIs guest Wi-Fi separated from the network your business systems use?

Yes Not sure No

Put guests and personal devices on a separate network from business systems.

Your result

Answer the questions to see your score.

0/100

Lower risk: strong foundations. Keep testing and improving.

Moderate risk: important gaps an attacker could use.

Higher risk: urgent gaps to close.

Your recommended next steps are shown under each question you answered "No" or "Not sure".

Book a free assessment

Your answers stay in your browser. Nothing is sent to us unless you contact us.

Bringing Smart IT to Life.

LinkedIn X Facebook Instagram

Services

Managed IT Support
Business Continuity
Network Security
Hybrid Cloud
Remote Monitoring
Starlink

Company

About us
All services
Insights
Contact

Visit

380 Bedford Hwy, Units 309 & 311
Halifax, NS B3M 2L4
info@hanatechinc.com
+1 (902) 801-7922

We use cookies for website analytics only if you agree. Privacy policy