How secure is your business?
Twelve questions about the basics that stop most incidents: sign-in, devices, backups, people, email and what you would do if it went wrong. You get a score out of 100, the areas that are exposed, and the three fixes that matter most. No jargon, and nothing you answer is stored.
Takes about 3 minutes. Your answers stay in your browser.
What the check covers
Most incidents that hit Irish businesses are not clever. They start with a password that was used twice, a laptop that missed its updates, a fake invoice that nobody phoned about, or a backup that turned out not to exist. The check scores the six areas where those basics live, two questions each, and turns the total into a score and a stage.
Accounts
Two-step sign-in, shared passwords and what happens to access when someone leaves. Stolen passwords are behind most break-ins.
Devices
Whether laptops and phones get updates on their own, and what a finder could see if one went missing.
Backups
Where your backups go, whether ransomware could reach them, and when anyone last tested a restore.
People
Phishing awareness and the one rule that stops invoice fraud: phone before paying changed bank details.
Email and website
Whether others can send email as you, and whether anyone looks after the website.
If it goes wrong
Who you would call, where the plan is, and the 72-hour GDPR deadline for reporting a breach.
The four stages
- Exposed0 to 24Several of the basics are missing. None of the fixes is expensive, and the first three take an afternoon.
- Gaps to close25 to 49Some protections are in place but not everywhere. The weakest areas are the ones an attacker would find first.
- Mostly covered50 to 74The main protections are there. What remains is testing them and writing the plan down.
- Well protected75 to 100Accounts, devices, backups and people are looked after, and you know what to do if something goes wrong.
How to use your result
Start with the three focus cards. They come from your weakest areas, and each lists the actions in the order we would do them. Two-step sign-in on email and a tested backup are the two changes that remove the most risk for the least effort, so if either appears, do it first. Every card links to guidance from the National Cyber Security Centre or the Data Protection Commission, so the advice is not only ours.
If you use AI tools, the AI readiness assessment covers how your data is handled in them, and the AI Act checker lists the legal duties that apply. Together with this check, they give a fair picture of where you stand.
Common questions
Is this a security audit?
No. It is a self-check based on your answers, built around the basics that stop most incidents. A security audit or penetration test looks at your systems directly. The check tells you where to start and what to ask for.
Who should answer the questions?
Whoever runs the business or looks after its IT. Several answers are about habits rather than technology, so an owner or manager often knows them better than an IT provider does.
What is two-step sign-in?
A second check when you log in, such as a code from an app on your phone, as well as your password. It means a stolen password is not enough on its own. It is also called two-factor or multi-factor authentication.
What are SPF, DKIM and DMARC?
Three settings on your email domain that tell other mail servers which senders are allowed to use your address. With them in place, email pretending to come from you is rejected or flagged. Your domain host or IT provider can set them up.
Is anything stored?
No. Your answers stay in your browser and are gone when you refresh. We do not see them unless you choose to send them to us.
Can Tenzing help with the fixes?
Yes. Our founder holds a certificate in cyber security, and most of the fixes on this page are a few hours of setup rather than a project. Bring your result to a free call and we will go through them.
Want help closing the gaps?
Our founder holds a certificate in cyber security. Most of the fixes on this page are a few hours of setup, and we can do them with you or alongside your IT provider. Bring your result to a free call.