Serving the continental U.S. | Business · Government · Education · Non-Profit
833-DNS-ONIT Support Center ➤
Let's Get Started
Free assessment

Are you an easy target?

Eight questions, about two minutes, no email required to see your result. Written for the person who runs the organisation, not the person who runs the network.

There are no trick questions and nothing here needs an IT person to answer. If you do not know, say so: not knowing is the most common answer and it is worth measuring on its own.

01 Do you know exactly who has administrator access to your email system?

Admin accounts are the ones worth stealing, and the list is usually longer than anyone remembers. Old staff, a consultant from a project, the vendor who set it up.

02 If someone signed into your CEO's mailbox from another country tonight, would anyone find out?

Most compromises are discovered weeks later by accident. The gap between the sign-in and somebody noticing is where the damage happens.

03 Has anyone restored a file from backup in the last 90 days to prove it works?

A backup that has never been restored from has not been shown to work. Insurers now ask for the date of the last test.

04 Can your staff approve a third-party app to read company email without asking anyone?

This is how a lot of mailbox access is stolen now. An approved app keeps reading mail after a password reset, which is why cleanups miss it.

05 Is multi-factor authentication on for every account, including shared mailboxes and service accounts?

The exceptions are the problem. One account without it is usually the way in, and shared accounts are the ones most often exempted.

06 When someone leaves, how long until their access is gone?

Not when HR closes the file. When the mailbox, the VPN and the shared drive stop working. Former staff accounts are a standard route back in.

07 Would your finance team spot a payment request that looked exactly like a real one?

Invoice fraud does not look like fraud. It looks like a supplier you know, with changed bank details, arriving in a thread you were already having.

08 Do you know what your cyber insurance requires you to have in place?

Policies now list controls as conditions. Answering a renewal questionnaire wrong can cost you the claim and not just the premium.