Area 1 of 9: Company basics
Answers stay in this browser until you save
Nine areas, about forty-five minutes, no account needed until you save. Answer honestly; the report is only useful if it is true.
Company basics
Do you know every state and country where you have customers, employees, or contractors?
Laws follow where people are, not where your office is. A Texas company with customers in California and a contractor in Spain has California privacy rules and EU rules to think about. Example: list every state where you have customers or staff and every country where you sell.
Is one named person responsible for security, privacy, and AI decisions?
It does not have to be a full-time job or a security specialist. Example: the operations lead owns security, privacy, and AI questions, spends a few hours a month on them, and is named as the owner in your policies.
Do you carry cyber insurance, and do you know what it requires of you?
Cyber insurance pays for breach response, legal costs, and sometimes ransomware. The application asks which controls you have (MFA, backups, training), and the policy usually requires you to keep them. Example: the policy requires MFA on email; if it is off when you claim, the claim can be denied.
Areas
1. Company basics
2. People and access
3. Systems and data
4. Security essentials
5. Privacy
6. AI use
7. Vendors
8. Incidents and continuity
9. Customers, contracts, and insurance
How scoring works
Yes scores 2, partly 1, no 0. Each area is a percentage. "Not applicable" leaves a question out of the score. The report ranks fixes by exposure and effort.