How secure is your business? Take the 2-minute self-check

Everyone signs in to email and key apps with a second step (MFA), not just a password.

Backups are kept off-site or in the cloud, and someone has tested a restore in the last year.

Every computer runs managed security software that is watched by someone, not just basic antivirus.

Operating systems, firewalls and key software are patched on a schedule, and someone checks that it happened.

Staff get security awareness training and phishing tests at least once a year.

When someone leaves, their accounts, devices and access are closed the same day by a written process.

Staff use a company password manager instead of reusing passwords or saving them in browsers.

There is a written plan for what to do, and who to call, if ransomware or a data breach hits.

Your firewall is current, monitored and reviewed, and guest Wi-Fi is separate from company systems.

You know what your cyber insurer and any regulations require, and can show you meet them.