Cyber Compliance Risk Score

If something went wrong tomorrow, could your business prove it took reasonable cyber security steps?

Most businesses assume they are fine.

They find out they are not when a breach happens, a client complains, or an insurer asks for evidence.

This score shows where your business may already be exposed across training, governance, data handling, ownership, and proof.

Get My Risk Score See What It Measures

Where businesses usually get caught out

Training exists, but cannot be proven Staff may have been told what to do, but there is little evidence to show it.

Policies exist, but are not being enforced Documents may exist, but they are not owned, acknowledged, tracked, or reviewed properly.

When proof is needed, there is activity but not evidence That is where businesses suddenly look patchy, reactive, or hard to defend.

Start the Score

Where businesses get caught out

The problem is rarely awareness. The problem is drift.

Most businesses already know cyber compliance matters. What they usually do not have is a clear starting point, a simple way to see what is missing, and a system for turning good intentions into visible evidence.

Staff are expected to know what to do, but training is not tracked If the business cannot show who completed training and when, it is harder to prove reasonable steps.

Policies exist, but nobody can show they were acknowledged or reviewed Documents sitting in folders do little if they are not visible, current, and actually used.

Sensitive data is handled in ways that feel normal, but create quiet risk Shared drives, old client files, broad access, and unclear retention practices often stay invisible until they become expensive.

When proof is needed, the business has activity, but not evidence That is when the gap between “we do take this seriously” and “we can show it” becomes painfully clear.

How this works

A vague obligation becomes a clearer reality check.

This score is not here to educate you in circles. It is here to show whether your business looks prepared, patchy or exposed, and what needs attention first.

Answer a few blunt questions No jargon. Just the issues that usually expose businesses when something goes wrong.

See where the business may already be exposed Get a clearer sense of whether it looks prepared, patchy, or hard to defend.

See what to fix first Leave with a priority, not a vague feeling that something should be sorted later.

Check your position

Score it in five minutes, free

The Cyber Compliance Check asks thirteen questions and scores two things separately: whether you have the controls, and whether you could produce the evidence if a client, insurer or regulator asked. Most businesses are further apart on those two than they expect.

What you get back

A control readiness score and a separate evidence readiness score.
An area-by-area breakdown across policies, training, access, incident response and oversight.
The specific records a third party asks for in each area you cannot yet prove.
Three priorities in order, with the first practical action for each.

No email needed to see your result. Under five minutes.

Take the Free Compliance Check

What your score means

What your score is really telling you

This is not about whether the business means well. It is about whether it would look prepared, patchy, or exposed if the wrong question was asked at the wrong time.

Stronger position You appear to have meaningful foundations in place. The next question is whether they stay current, visible, and easy to prove when needed.

Action needed You likely have some foundations, but there are enough gaps to make the business look patchy if something goes wrong or proof is requested.

High exposure Your business may be relying on assumptions more than structure. That usually stays invisible until it becomes expensive, urgent, or difficult to explain.

Next step

Do not wait until something goes wrong to find out how hard your business is to defend.

If your score is not where it should be, the answer is not more vague awareness. It is a clearer system for training, governance, accountability, and evidence of reasonable steps.

Book a Compliance Call Recheck My Score

General information only. This page is not legal advice.