Small Business Security LASER
Introduction - Small Business Risk Assessment
This form can be filled out by anyone, but it is usually easiest for
the person that has the most responsibility related to Information
Security or Information Technology. Throughout the assessment, you'll
find links to additional definitions and resources that can help
provide more information about the question.
Try to answer each question and do not use the 'unsure' option unless
you have low confidence in the accuracy of your answer.
Your risk assessment score is:
This score puts you at a low risk for cyberattacks. Great work!
Maintain and monitor your cybersecurity posture.
Try the
'Eat Hackers for Lunch'
Campaign to see if there are any additional areas you can address.
Your risk assessment score is:
This score puts you at a moderate risk for cyberattacks. We
recommend that you actively build up your cybersecurity maturity.
Fortunately, implementing basic cybersecurity features is something
you can do quickly and easily in order to reduce the chances of an
attacker gaining access to information that could shut down your
business.
Step 1: Your Personalized Recommendations
Step 2: Eat Hackers for Lunch
Use the
'Eat Hackers for Lunch'
Campaign to get started with the basics.
Step 3: Consider getting additional security support and continue
to improve your business’ cybersecurity
View our brief guidance on selecting cybersecurity providers Try to implement the Global Cybersecurity Alliance Toolbox Recommendations
Level 1 and possibly Level 2
Your risk assessment score is:
This score puts you at a high risk for cyberattacks. Based on
your risk level, we recommend that you take urgent action to
improve your security.
Fortunately, implementing basic cybersecurity features is something
that you can do quickly and easily in order to reduce the chances of
an attacker gaining access to information that could shut down your
business.
Step 1: Your Personalized Recommendations
Step 2: Eat Hackers for Lunch
Use the
'Eat Hackers for Lunch'
Campaign to get started with the basics.
Step 3: Consider getting additional security support and continue
to improve your business’ cybersecurity
View our brief guidance on selecting cybersecurity providers Try to implement the Global Cybersecurity Alliance Toolbox Recommendations
Level 1 and possibly Level 2
Implement CIS Controls Implementation Group 1
(or a similar cybersecurity framework)