How many employees does your organisation have?
This helps us calibrate recommendations to your context.
Do you have a documented information security policy?
A document setting out security rules and responsibilities.
Do you take regular backups of critical data?
And do you verify them periodically to ensure they can be restored?
Do your employees receive cybersecurity training?
Including phishing simulations, best practices and incident response procedures.
Do you manage security updates (patches) for your systems?
Operating systems, applications, router firmware, etc.
Do you use multi-factor authentication (MFA) on critical systems and services?
Corporate email, VPN, management tools, remote access, online banking...
Do you have a cybersecurity incident response plan?
A documented procedure for how to act in the event of ransomware, phishing, a data breach, etc.
Do you control who has access to which data and systems (privilege management)?
Principle of least privilege: each person accesses only what they need for their role.
Does your organisation comply with the General Data Protection Regulation (GDPR)?
Records of processing activities, legal basis, data subject information, security measures...
Has your organisation experienced any security incident in the past 2 years?
Successful phishing, ransomware, unauthorised access, data loss, fraud...
Want the full report?
Leave your email and we'll send you the detailed diagnosis with prioritised recommendations for your profile.