Free Business Risk Score

The Business Risk Score is a free, two-minute assessment that gives you an immediate snapshot of how prepared your business is for the risks that most often cause disruption. It is a starting point for a fuller assessment, not a replacement for one.

What the score measures

The score focuses on reported cybersecurity practices and business preparedness: backups and recovery, access control and authentication, patching, supplier and insurance arrangements, and documented response steps.

What the score cannot tell you

It cannot prove that systems are secure, certify compliance, or score every financial, legal or operational risk. Use it to find areas worth a closer look, then verify the ones that matter.

How to read your result

A lower score points to specific practices to improve first. Each finding links to a practical next step, and you can move from the quick score into a guided professional assessment for depth.

What happens after the score

You can keep the snapshot for your records, or continue into a guided Business Impact Analysis, Threat & Risk Assessment, Privacy Impact Assessment or Business Continuity Plan to produce a professional report.

Who it is for

Owner-operators, managers and IT leads at small and mid-sized organizations who need a fast, honest starting point without committing to a long consulting engagement.

How the score is calculated

Each answer maps to a practice that reduces or increases exposure. The weighted results roll up into a single score and a set of findings, so you can see both the headline number and the specific areas behind it.

How to improve your score

Start with the findings that carry the most weight and are cheapest to fix: enable multi-factor authentication, test a backup, document a recovery step, and remove a single point of failure. Re-take the score to confirm progress.

Frequently asked questions

Is the Business Risk Score really free?

Yes. You can complete the score and see your result at no cost. The guided professional assessments are separate tools.

How long does it take?

About two minutes for the eight questions.

Is my information kept private?

Yes. See the Trust Center and Privacy Policy for how data is handled. The score is designed to be a low-risk starting point.

Is the score a certification?

No. It is an educational snapshot based on your answers, not an audit or a compliance certificate.

What should I do with a low score?

Work through the top findings, then run a guided assessment for the area with the biggest potential impact on your business.

Related resources