Express IT Risk Audit

Express IT risk audit for business.

Mark the items that are not covered or raise doubts. At the end, you will get an approximate risk level and first next steps. This is not a lead form: answers remain in your browser.

Privacy: do not enter passwords, server addresses, employee names or other sensitive data. The checklist only counts selected risks and does not send the result to the server.

Access and ownership

It is unclear who actually controls the domain, hosting or server.Access is held by a former employee, old contractor or private chats.There is no current list of domains, servers, accounts and other important access points.It is unclear who can quickly transfer access during an incident or contractor change.

Backups

Backups exist “somewhere”, but restoration has not been tested for a long time.Website, database or important file backups are stored on the same server as the main system.There is no clear answer for how far back data can be restored.Nobody receives alerts when backups fail.

Website, servers and monitoring

You learn that the website is down from customers, not monitoring.SSL, domain or hosting may expire without advance control.The website has not been checked recently for updates, vulnerabilities, speed or errors.After previous changes, it is unclear what was changed and whether it can be safely updated.

Processes and contractors

There is no single technical owner who sees the whole picture.Different contractors own different parts, and the problem is often “not their area”.Managers manually copy data between the site, spreadsheets, CRM or messengers.There is no short plan for what is critical now and what can wait.