Eight questions. Ninety seconds. No email required.
Not a strategy exercise — a straight check of what is actually in place. Backups you can restore from, multi-factor on email, access that ends when employment does, updates that land, somebody watching out of hours.
“I don’t know” is a normal answer, and it is a finding rather than a failure. In most businesses it is the true answer to at least half of these. Nobody has told you, because nobody has been made responsible for telling you — and that is a cheaper problem to fix than any of the individual gaps underneath it.
Question 1 of 8 · about ninety seconds · nothing gets emailed unless you ask for it
The eight controls that decide whether an ordinary bad day becomes an expensive one.
Every item sorted into Covered, Assumed or Exposed — and for each exposure, what actually happens when it fails.
Nothing, and there is no gate. If your environment is in good order it will tell you that and say so plainly.
Twenty minutes on what you are actually running.
How many users, how many servers, what is in the cloud, what state the security is in. You leave with a real number and a start date, and no obligation attached to either. If the readout above says you are in good order, the call is twenty minutes confirming it and naming what would change that.
Want this readout in writing?
We will email it to you — the whole thing, including your answers, in a form you can forward to a partner or a board. There is nothing held back for the email version; you have already read all of it.