Tubesock Free Cybersecurity Risk Assessment

Access & Authentication

Does your organization enforce multi-factor authentication (MFA) for all user accounts?

Yes, for all accounts Only for admin / privileged accounts We're in the process of rolling it out No, we don't use MFA

How does your organization manage passwords?

Enterprise password manager with enforced policies Password manager recommended but not enforced Basic complexity requirements only No formal password policy

Data Protection

How frequently does your organization back up critical data?

Daily automated backups with offsite copies Weekly backups to a separate location Occasional manual backups No regular backup process

Is sensitive data (customer info, financials, IP) encrypted at rest and in transit?

Yes, both at rest and in transit Only in transit (e.g., HTTPS / TLS) Partially — some systems but not all No encryption in place

Endpoint & Network Security

Are all devices (laptops, servers, mobile) running up-to-date endpoint protection?

Yes, centrally managed EDR / antivirus on all devices Most devices, but some are unmanaged Basic antivirus on some devices No endpoint protection in place

Does your organization use a firewall and monitor network traffic for threats?

Yes, next-gen firewall with active monitoring / SIEM Firewall in place but limited monitoring Basic router firewall only No firewall or monitoring

Employee Awareness

Do employees receive regular cybersecurity awareness training?

Yes, quarterly training with phishing simulations Annual training program One-time onboarding training only No formal training

Is there a clear process for employees to report suspicious emails or activity?

Yes, with a dedicated reporting tool and response team Employees know to forward to IT Informal — handled case by case No process in place

Incident Response & Compliance

Does your organization have a documented incident response plan?

Yes, tested and updated regularly Documented but never tested Informal / ad hoc approach No incident response plan

When was your last security audit or vulnerability assessment conducted?

Within the last 6 months Within the last year Over a year ago Never conducted one

✓

Get Your Results

Enter your details below to receive your personalized risk report and actionable recommendations.

First Name * Please enter your first name.

Last Name * Please enter your last name.

Work Email * Please enter a valid email address.

Phone Number * Please enter your phone number.

Company Name * Please enter your company name.

Your information is secure and will never be shared with third parties.

0 out of 30

Calculating…

Category Breakdown

Want Expert Help Fixing These Gaps?

Our team can walk you through your results and build a remediation roadmap tailored to your business.

Schedule a Free Consultation