What should you fix first?

Ten questions about what your business actually does — not what you know. Two minutes, no signup, and you get a prioritised list rather than a score.

1. When did someone last restore a real file from your backup?

A backup nobody has restored from is a hope, not a backup.

2. Is multi-factor authentication required on email for everyone?

Email is the account that resets every other account.

3. A supplier emails asking you to update their bank details. What happens next?

This is the single most common way small businesses lose real money.

4. Can someone send email that looks like it came from your domain?

Without DMARC, anyone can - and your customers see a convincing invoice.

5. When someone leaves, how quickly are their accounts disabled?

Former staff accounts are the access nobody is watching.

6. How many people can install software on their own computer?

Admin rights are how a bad click becomes a bad day.

7. Who makes sure computers, the firewall and the Wi-Fi get updates?

Unpatched kit is the most common way in, and it is nobody's job by default.

8. How do staff keep track of passwords?

Reused passwords turn one breach somewhere else into a breach at yours.

9. If your main server or NAS died this morning, how long until you were working again?

Most businesses have never worked this out, and the real answer surprises them.

10. Something breaks at 6pm on a Friday. Who do you call?

Knowing the answer in advance is most of the value of having one.

Nothing is stored unless you ask for the written version. Skip any question you would rather not answer — we will not guess at it.