A PRACTICAL STARTING POINT

Cyber security review.
A plan for your business.

Ten questions about the way your business protects itself. Turn your answers into a useful plan for you, your team and your providers.

10 guided questionsA tailored action planNo scanner API key

This is a self-reported review. It does not scan a website or verify your controls.

This small-business cyber security self assessment connects your answers with practical actions. Use the business resilience guide and planning template to record owners and evidence alongside your review.

Your answers stay in this page. Answers are not sent to CyberScan or saved in browser storage. Leaving or reloading clears them. Download your plan if you want to keep it.

Protect accessQuestion 1 / 10

Are your business email accounts protected by passkeys or multi-factor authentication?

Include every mailbox user. If a password remains available, it should be unique and protected by a second factor.

YesThis is in place, to the best of my knowledge.No / partlyThere is a gap or work still to do.Not sureI need someone to confirm this.

Why this matters

Email access can be used to reset other accounts and impersonate your organisation.

NCSC: Secure your email

GUIDANCE BEHIND THE QUESTIONS

Grounded in practical sources.

Questions draw on NCSC guidance for small organisations and MDN web security guidance. CyberScan is an independent resource.

NCSC: Secure your email NCSC: Secure important online accounts NCSC: Protecting your devices NCSC: Backing up your data NCSC: Prepare for incidents NCSC: Email security and anti-spoofing MDN: Practical security implementation guides NCSC: Establish control in your supply chain NCSC: Spotting cyber attacks NCSC: Response and recovery

Dealing with an incident now?

Use your provider’s incident support and the NCSC response and recovery guidance (opens in a new tab). This review is a planning tool, not an incident-response service.