Free Self-Assessment · Current as of July 2026

The IT Health Self-Assessment

Twelve questions. Five minutes. These aren't our questions — they're the ones a cyber insurance underwriter will ask you.

What's inside

Most IT quizzes are marketing. This one is somebody else's underwriting form.

We didn't invent these questions. Every one appears on a real cyber insurance application — the document that decides whether you can buy a policy, on what terms, and whether a claim gets paid. They're written by people whose own money is on the line, which makes them the most honest security checklist a small business can get.

  • Twelve real underwriting questions. On one major carrier's form: “if the answer to any question in this section is No, coverage cannot be bound.”
  • A score, and what an underwriter would do with it. Strong submission, expect conditions, or expect difficulty — with the honest bands.
  • The question that catches everyone. Is your “cloud backup” actually a file-sync service? Sync copies the ransomware up to the cloud for you.
  • The one to fix first — and it's free. It isn't the one you'd guess, and the claims data is unambiguous about it.
  • A myth we went looking for and couldn't find. “Windows 10 voids your cyber insurance.” We searched for the policy language. There isn't any.

It scores itself as you answer

The assessment runs entirely in your browser — nothing you type is transmitted, stored, or sent to us. Answer honestly; that’s the only way it’s worth anything.

Get the assessment

It opens immediately on the next screen — read it online, or save it as a PDF. Nothing gets emailed to you.

We'll use your details to follow up about your IT — that's the deal, and it's the only reason we ask. No spam, no list you can't get off, and you can tell us to stop at any time.