Assurbyte Book the free checkup
Menu

Free security checkup

Free small office security checkup

17 questions, about 5–10 minutes. You get a readiness level, a few quick wins you can do yourself and plain notes on any gaps. Then, if you want, a free 20-minute call.

Start the checkupFree · no sign-up
  1. Two-step sign-in (MFA) Core itemIs two-step sign-in (a phone app prompt or security key on top of the password) turned on for everyone's email and other important accounts, like banking, payroll and tax software?
  2. Automatic backups Are your files and email backed up automatically, with at least one copy that isn't always connected to your network?
  3. Test restore In the last 6 months, has anyone restored a file from your backup and opened it to make sure it works?
  4. Unique logins Does every person have their own login, with a different long password for each work account?
  5. Password manager Does everyone in the office use a business password manager, protected with two-step sign-in?
  6. Wi-Fi setup Is your Wi-Fi set up safely: (a) a separate guest network, (b) the router's admin password changed from the factory default, and (c) router updates installed in the last 6 months?
  7. Separate admin accounts Do everyday accounts have standard (non-admin) rights, with admin rights kept on separate accounts used only for admin work?
  8. Former staff and old accounts When someone leaves, are all their accounts turned off on their last day, with no old accounts left behind?
  9. Updates Do all computers, phones, browsers and key apps update automatically, with no devices that no longer get security updates?
  10. Antivirus / endpoint protection Does every computer have antivirus or endpoint protection that's on, updating, and has someone who reads its alerts?
  11. Phishing training Has everyone had training on spotting fake emails in the last 12 months, with new hires trained when they start?
  12. Email protection Is spam filtering on, and are SPF, DKIM and DMARC set up for your email domain so others can't easily send email pretending to be you?
  13. Device encryption Core itemAre all laptops and desktops encrypted (BitLocker or Device Encryption on Windows, FileVault on Mac), and do all phones have a passcode?
  14. Where your data lives Do you have a current written list of where client and employee data is kept (devices, cloud apps, paper files) and who can access each place?
  15. Incident plan Core itemDo you have a written plan for what to do if email is hacked, ransomware hits, or a laptop is lost, covering who to call, first steps and who must be told?
  16. Written security plan (WISP) Core itemDoes your business have a written information security plan (WISP) that fits your real systems, names who is responsible, and was reviewed in the last 12 months?
  17. Named security lead (Qualified Individual) Core itemHas one person (on staff or an outside provider) been named in writing as the "Qualified Individual" in charge of your security plan, and do they know it?
Results appear right here. Nothing is sent anywhere.

After your result

On a free 20-minute call we'll go through your results, your top 3 gaps and your next steps, then send you a written summary.

Book the free checkup call

Opens an email to hello@assurbyte.com. Send two times that work and we'll confirm within one business day.

Already know you want the work done? See the Readiness Package.

What the checkup isn't

  • No access to your Microsoft 365 or Google accounts, no scanning and no software to install.
  • We never ask for passwords.
  • Follow-up calls are limited to 3 a week, so you may be offered a later slot.

Not legal advice. This checkup is a readiness snapshot based on your own answers. It points out likely gaps; it doesn't show that your office meets the FTC Safeguards Rule or any other law.