Self-Assessment

A short control check, not a fake security score.

Answer eight questions about the current environment. Results are calculated in the browser and identify which control areas deserve a closer look; they are not an assessment, certification, or risk guarantee.

01Privileged accounts use MFA and have controlled recovery methods.
02Administrative roles are reviewed and stale privileged access is removed.
03External forwarding and mailbox delegation are restricted or reviewed.
04Guest access and connected cloud applications have named owners and review dates.
05A representative restore test has been completed for critical systems.
06Security-relevant logs are retained long enough to support investigation.
07Vendor access has an offboarding process and accountable owner.
08Incident authority, escalation contacts, and out-of-band communications are documented.

Answer the questions to produce category-level observations.