Cyber Resilience Scorecard

Most cyberattacks on small firms aren't sophisticated - they exploit ordinary gaps like a missed update, a reused password, or a backup nobody ever tested. This 5-minute scorecard walks through the basics that actually matter for a 10-50 person professional-services firm: backups, access control, email security, device hygiene, and incident readiness. Answer honestly (not how it looks on paper, but how it really works day to day) and you'll get a score out of 100 with a clear next step for your firm.

11 questions

1. If ransomware locked up your main server tomorrow, how confident are you that you could restore everything without paying anyone?
2. Do your backups live somewhere separate from your main office network (cloud or offsite), so a single incident can't wipe out both?
3. Does everyone at your firm need a second step (a code, an app, a prompt) to log into email, not just a password?
4. Are staff required to use a password manager rather than reusing the same password across systems?
5. Have your staff been through any phishing simulation or training in the last 12 months?
6. If someone in your office received a suspicious invoice or password-reset email, would they know exactly what to do?
7. Are laptops and PCs across your firm kept up to date automatically, or does it depend on someone remembering?
8. If a laptop was lost or stolen tomorrow, is the data on it encrypted so it can't just be read off the drive?
9. Do you have a written plan for what to do in the first hour of a suspected breach - who to call, what to shut down, who tells clients?
10. Do you currently hold cyber insurance, and have you actually reviewed what it covers?
11. What's the one cyber-related worry that actually keeps you up at night about your firm?

Answer these with us on a call: 1 (888) 897-3611.