Self-AssessmentFoundational controls

Assess your cybersecurity fundamentals

Review each control to generate a prioritized readiness snapshot. This tool supports planning; it does not replace a security audit or penetration test.

Passwords & accounts

Multi-factor authentication protects the primary business email account

Email access can be used to reset credentials across connected services.

Each staff member uses an individual account for business systems

Shared credentials weaken accountability and complicate access removal.

Backups

Business files and records are backed up on a schedule

Critical files, databases, and operational exports need a defined recovery path.

Your team tested a backup restoration during the last quarter

A backup is useful only when the required data can be restored.

Wi-Fi & network

Guest Wi-Fi is separate from staff, POS, and cameras

Guest traffic should not share access with operational or security devices.

Default router and switch passwords are changed

Default credentials are widely known and frequently targeted.

Website

Your website loads over HTTPS with a valid certificate

Secure transport protects submitted data and supports visitor trust.

Website software and dependencies follow a defined update process

Unmaintained components can expose known vulnerabilities.

Cameras & physical

Security camera microphones are disabled in your business

Audio-recording requirements vary by jurisdiction and operating context.

Default passwords on cameras and recorders are changed

Internet-connected devices with default credentials are routinely targeted.