5 quick questions. Instant score. Find out if your business is protected, or one phishing email away from a $50,000 ransomware bill.
Takes 90 seconds No personal info required Instant result
Question 1 of 50% complete
Does your business use multi-factor authentication (MFA)?
MFA requires users to verify their identity with a second method (like a phone app) when logging in. It blocks over 99% of automated attacks.
How are your software and operating systems kept up to date?
Unpatched software is the #1 entry point for ransomware. The WannaCry attack that crippled the NHS exploited a known vulnerability with a patch that had been available for 2 months.
Does your business have working, tested backups?
Ransomware criminals know most businesses don't test their backups. 58% of businesses that pay a ransom still can't recover all their data. A tested backup is your best defence.
How do you manage who has access to what in your business?
Over-privileged accounts are a major risk. The principle of "least privilege" means staff should only have access to what they need for their role, and nothing more.
Has your team received cyber security awareness training in the last 12 months?
91% of data breaches start with a phishing email. A staff member who knows how to spot a suspicious email is one of your best defences, better than most technical controls.
π
Your score is ready!
Enter your details below to see your result and receive a personalised action plan.
We won't spam you. Your details are used only to send your report and (if you choose) to follow up. See our Privacy Policy.
Your answer breakdown:
Want a full Essential 8 assessment?
This quiz covers the basics. Our free Essential 8 audit goes deeper, scoring your business against all 8 ACSC controls with specific remediation steps.
