How exposed is your business, really?
Ten yes-or-no questions about the controls insurers and attackers check first. Two minutes, no IT person needed, and your score appears the moment you finish.
1 · Accounts
Does everyone need a second step, like a code or an app, to sign in to email and remote access?
2 · Devices
Is every computer protected by endpoint detection and response (EDR), not just antivirus?
3 · Backups
Has anyone restored files from your backup in the last 90 days to prove it works?
4 · Backups
Is there a backup copy that ransomware could not reach or delete, offline or immutable?
5 · Devices
Are Windows and software updates installed automatically, and checked, within a couple of weeks of release?
6 · Accounts
Do everyday users work without administrator rights on their own computers?
7 · People
Has your team had phishing or security awareness training in the last 12 months?
8 · Email
Is your email domain set up with SPF, DKIM and DMARC records?
9 · Accounts
When someone leaves, is their access to email, files and apps removed the same day?
10 · Readiness
If ransomware hit tomorrow, is there a written plan for who does what and who to call?
The questions your insurer is already asking
Cyber-insurance applications now ask about these controls by name, and a wrong answer can void a claim. They are also the gaps behind most small-business breaches we see.
The detail behind each one: Cyber insurance requirements for Wisconsin small businesses
About the scorecard
The ten controls behind most small-business breaches and most cyber-insurance questionnaires: multi-factor sign-in, endpoint detection, tested and ransomware-proof backups, patching, admin rights, training, email authentication, offboarding and an incident plan.
No. Every question is written for an owner or office manager. If you do not know an answer, choose Not sure; an insurer treats an unknown control as missing, so the score does too.
Not unless you ask for the full report. The score is calculated in your browser. If you request the report, your answers go to Quantum with your contact details so the person who calls already knows where you stand.
A 15-minute call with a local engineer from Sturgeon Bay or Algoma: we go through your gaps, check the ones you were not sure about, and tell you which fixes matter most and what they take.
Rather talk it through?
A 15-minute call with a local engineer: where you stand, and what to fix first.
No obligation. No sales pressure. Just an honest conversation.