Could you demonstrate reasonable steps today?
Six questions. Two minutes. Find out whether your business is likely to have cyber compliance obligations and whether you could evidence reasonable steps if challenged.
Is your business likely to exceed $3 million in annual turnover?
Do you handle personal or sensitive information such as client records, financial details, identity documents, or health information?
Would your business need to answer cyber or privacy questions from clients, insurers, auditors, or regulators?
If asked today, could you produce evidence of cyber security practices such as staff training, policy acknowledgement, reviews, or incident response preparation?
Is cyber security formally reviewed by management or leadership?
Are staff trained and tracked on how to handle information securely?