INTERACTIVE PREVIEW

Try the guided assessment.

Explore all three guided paths here. Answers stay in this browser tab. Saved results and authorised Business technical checks are available after sign in and service configuration.

Never enter passwords, authentication codes, recovery codes, banking credentials, or private tokens.

0 of 24 answered

Create an account to save an assessment and use authorised Business checks →

DRAFT SECURITY HEALTH SCORE—

ASSESSMENT COVERAGE0%

Based on answered, applicable controls only. Unknown answers remain Not Assessed. This score is neither certification nor a guarantee against compromise.

Areas to improve from your answers

No improvement areas have been identified from the answers so far. Review unanswered and unknown controls before drawing conclusions.

01 When you sign into your main email account, what normally happens after entering your password?Password onlyA text-message codeAn authenticator appA passkey or security keyI don't know

02 Do your other important accounts use multi-factor authentication?Yes, my important accounts use itI know at least one important account does not use itI don't know

03 Can you securely recover access to your important accounts if you lose a device?Yes, I have an accessible and protected recovery routeI know my recovery route is inaccessible or weakI don't know

04 Are your account recovery contact details current?Yes, I have checked themI know they are outdated or have not been verifiedI don't know

05 Do you use different passwords for your important accounts?Yes, they are uniqueI reuse a password across important accountsI don't know

06 Do you have a reliable way to keep important account passwords unique?Yes, I use a secure manager or another reliable methodNo, I have no reliable method and cannot keep them uniqueI don't know

07 How do you handle credentials for important accounts?I avoid predictable, shared, or exposed credentialsI use predictable or shared credentials, or handle them unsafelyI don't know

08 Do your main phone and computer lock automatically when left unused?YesAt least one does notI don't know

09 Do your main devices receive supported operating-system security updates?Yes, updates are enabled and devices are supportedUpdates are disabled or routinely deferred, or a device is unsupportedI don't know

10 Is encryption enabled on devices where you keep sensitive information?YesI know it is disabled on a device holding sensitive informationI don't know

11 Are the built-in or installed security protections on your main devices enabled?Yes, where applicableI know protection is disabled or absent where it should be presentI don't know

12 Can you locate, lock, or erase a lost main device where that feature is supported?Yes, it is set upNo, it is supported but not set upI don't know

13 What security does your home Wi-Fi use?Modern Wi-Fi encryption is enabledThe network is open or uses obsolete securityI don't know

14 Has the administrator password for your home router been changed from its original default?Yes, it is now strong and uniqueNo, it is still the original defaultIt was changed, but it is weak or sharedI don't know

15 Do you check for and apply home-router firmware updates?Yes, or updates are automaticI never check or update it, or know it is unsupportedI don't know

16 Do you have a backup of the information you consider important?YesNo, important information has no backupI don't know

17 Is at least one backup separate from the device holding the original information?YesNo, my only copy stays on the same device or is always attachedI don't know

18 Could you reasonably recover important information from your backup?Yes, I know a workable recovery routeNo, I have no reasonable recovery route or confidence in itI don't know

19 Are your social-account privacy settings limiting exposure of sensitive personal information as intended?YesI know sensitive information is exposed more widely than intendedI don't know

20 Have you reviewed sensitive permissions granted to your apps?Yes, unnecessary access is removedI know apps have unnecessary sensitive access and I never review itI don't know

21 Have you reviewed unused accounts that may still expose your information?Yes, material unused accounts are closed or protectedI know material unused accounts remain active without review or protectionI don't know

22 How do you handle messages that might be phishing or scams?I verify suspicious requests through a trusted routeI act on suspicious requests without basic verificationI don't know

23 What do you do with an unexpected link in a message?I verify it before following itI routinely follow unexpected links without checkingI don't know

24 How do you handle unexpected payment or account-change requests?I confirm them through a trusted, separate routeI act on them without independent verificationI don't know