Free Assessment

Cyber Essentials Quiz

10 quick questions across the 5 control areas Cyber Essentials actually checks. Answer honestly — the point is finding the gaps, not getting a good score.

This is an informal self-assessment for guidance only, not an official Cyber Essentials certification result. Certification is issued by IASME-approved bodies through their own formal assessment.

Firewalls

Does your business use a firewall to protect your internet connection (on your router or a dedicated device)?

Firewalls

Are firewall rules reviewed regularly, with unnecessary ports and services closed off?

Secure Configuration

Are default passwords changed on all new devices, software, and accounts before they're used?

Secure Configuration

Are unnecessary user accounts, apps, and services removed from devices and systems?

User Access Control

Do staff only have access to the systems and data they actually need for their role?

User Access Control

Is multi-factor authentication (MFA) switched on for email, cloud, and admin accounts?

Malware Protection

Is anti-malware software installed and kept up to date on every device?

Malware Protection

Are staff prevented from installing software that hasn't been approved?

Security Update Management

Are operating systems and applications updated within 14 days of a security fix being released?

Security Update Management

Do you keep an up-to-date inventory of every device and piece of software in use?