Free check
How exposed is your business?
Ten plain yes or no questions about the cyber security basics. You get a result in plain words and a list of next steps, each linked to an OwnerSec guide.
Information only, not a security audit or professional advice. Your answers stay in this browser tab. They are not stored or sent anywhere, and the checker sets no cookies.
Share this checker
Free to share with your team, clients or members. It runs in the browser and stores nothing.
Link: https://ownersec.co.uk/tools/exposure-checker
Suggested wording: "OwnerSec's free 10-question cyber security check for small businesses"
The step-by-step checker needs JavaScript. Here are the 10 questions instead. If you cannot answer yes to one, read the guide next to it.
Is multi-factor authentication (MFA) switched on for every email account, including yours? Read: MFA for Microsoft 365 beginners or Authenticator apps for staff accounts
Does everyone use a company password manager, rather than notes, browsers or group chats? Read: Best password manager for small UK businesses or How to stop staff reusing passwords
Have you restored a file from your backup in the last three months, to prove it works? Read: Backup and ransomware restore test or Is OneDrive a backup?
If a supplier emails new bank details, do you always phone them on a number you already had before paying? Read: Invoice fraud and change of bank details checklist
Are automatic updates switched on for work laptops, phones and key software? Read: Cyber Essentials for beginners or Cheap endpoint protection for under 50 staff
When someone leaves, do you have a written list for removing their access on their last day? Read: Staff leaver checklist or Why shared logins are a liability
Do you and your staff use a normal account day to day, and keep admin accounts for admin jobs only? Read: Cyber Essentials for beginners or MFA for Microsoft 365 beginners
If a work laptop was stolen tomorrow, is it encrypted, and could you lock or wipe it remotely? Read: Lost or stolen laptop day-one checklist or Remote-work security checklist
Do staff know how to spot a phishing email, and who to tell straight away if they click one? Read: First hour after a phishing click or The week after a phishing click
Do you know what Cyber Essentials is, and whether your customers or insurer expect it? Read: Cyber Essentials for beginners or What cyber insurers ask small firms
10 quick questions
About 2 minutes. Answer for the business as it is today. If you are not sure, choose No.
Your answers stay in this tab. Nothing is stored or sent.
Start
Share this checker
Free to share with your team, clients or members. It runs in the browser and stores nothing.
Link: https://ownersec.co.uk/tools/exposure-checker
Suggested wording: "OwnerSec's free 10-question cyber security check for small businesses"
This page has no affiliate links. Some of the guides it links to do, and they are labelled. See how we make money .