Start With a Cybersecurity Self-Assessment

Cybercriminals are increasingly targeting small and mid-sized businesses (SMBs). According to Accenture’s Cost of Cybercrime Study, 43% of cyberattacks are aimed at SMBs, yet only 14% are adequately prepared to defend themselves.

If that stat stops you in your tracks, you’re not alone.

The financial repercussions of a cyberattack can be devastating. IBM reports that the global average cost of a data breach reached $4.88 million in 2024, marking a 10% increase from the previous year. For SMBs, these costs can be particularly burdensome—limited budgets can make overcoming a cyberattack nearly impossible.

Alarmingly, 60% of businesses that experience a cyberattack close within six months. Robust cybersecurity measures aren’t an option if you want your business to be successful in the long run.

These risks are serious, and yet many businesses remain underprepared. Whether you’re running basic anti-virus software or believe your cybersecurity is solid, this self-assessment checklist will help you uncover blind spots and vulnerabilities.

This test will provide an interactive, realistic snapshot of how prepared your business is for today’s ever-evolving threats, including ransomware, phishing, AI-generated scams, and compliance pitfalls. Want to skip the self-assessment and jump to an expert evaluation? As a technology partner, our team can provide a comprehensive cybersecurity risk assessment to give you a clear picture of your current security posture.

What Is a Cybersecurity Self-Assessment?

A cybersecurity self-assessment is a guided checklist or quiz that helps organizations evaluate their current risk level and identify gaps in their security framework.

It doesn’t require technical expertise, just honest answers. Think of it as a temperature check on your cybersecurity hygiene.

If you can identify red flags early, you can help your business avoid the chaos and costs associated with a data breach. For SMBs, this tool is especially valuable because many lack dedicated security teams or complex infrastructure.

A cybersecurity self-assessment can help you:

Cybersecurity Checklist for SMBs

Use this 10-question checklist to assess your organization’s cybersecurity readiness. Select “Yes” for each item that applies to your current practices.

1. Do you have a written cybersecurity policy that employees are required to follow?

2.    Do you conduct cybersecurity training for employees at least twice per year?

3. Is multifactor authentication (MFA) enforced on email, VPN, and/or admin tools?
4. Do you restrict access to sensitive systems and data based on job roles (role-based access control)?

5. Do you use endpoint detection and response endpoint detection and response (EDR) or advanced anti-virus software?

6. Do you use a secure cloud backup that’s tested regularly?
7. Have you reviewed and updated your cybersecurity strategy within the past 12 months?
8. Do you have cyber insurance coverage that includes protection against ransomware and social engineering attacks?

9. Have you addressed risks from AI-generated threats, such as deepfakes and phishing scams?

10. Do you perform regular vulnerability scanning and/or penetration testing?

Interpreting Your Cyber Risk Score

0–3 Yes Answers

Your business is in the Critical Risk zone. You’re likely missing essential protections, and your business could be a prime target for attacks. Act fast and consider a professional cybersecurity risk assessment.

4–6 Yes Answers

You’re in the At Risk category. Some fundamentals are in place, but you’re vulnerable to serious threats. It’s time to patch gaps and improve employee training.

7–9 Yes Answers

You’re in the Low-Risk range. Your cybersecurity strategy is solid. Keep it updated and explore advanced solutions to stay ahead of the curve.

10 Yes Answers

You’re in the Cybersecurity Leader zone. Great work! Let’s discuss proactive measures such as compliance audits, AI security, and cyber insurance optimization.

Schedule a Professional Cybersecurity Risk Assessment

This checklist is just the beginning—if you want a deeper look into your company’s vulnerabilities and strengths, we recommend a professional cybersecurity risk assessment.

Following the assessment, our team of experts will work closely with you to help prioritize your next steps and develop a comprehensive, long-term security strategy.

FAQ: Cybersecurity Risk Assessments

A cybersecurity risk assessment is a professional review of your company’s vulnerabilities, threats, and mitigation strategies involving scans, interviews, and technical audits.

A self-assessment is a quick DIY tool. A professional risk assessment is more comprehensive and tailored to your business needs.

Probably. Policies may require certain protections to be valid—insurance is a backup, not a substitute for security. Learn more about cyber insurance.
Probably not on its own. AI tools can easily generate phishing emails and deepfake videos, as well as automate breach attempts. SMBs must be proactive in countering these threats.
Based on your results, we can help you develop a comprehensive step-by-step cybersecurity plan, from immediate fixes to long-term strategies.

Get In Touch – We Help Keep Your Business Safe.

Whether you scored a two or a 10 on your self-assessment, there’s always more you can do to help protect your business. High Touch Technologies has over 40 years of experience helping companies just like yours build layered, future-proof technology strategies.

Let’s take the next steps to protect your business together—get in touch with our team to learn more.