FREE · 2 MINUTES · NO SIGN-UP

Cyber recovery readiness check.

Ten quick questions on how well your backups would hold up against a ransomware attack. You’ll get a score and the three things to fix first. Your answers stay in your browser — nothing is sent or stored.

QUESTION 1 OF 10 · IDENTITY

Do all administrator accounts on your backup platform use multi-factor authentication?

QUESTION 2 OF 10 · IDENTITY

Are backup administrator accounts separate from your everyday production directory (e.g. not ordinary Active Directory domain admins)?

QUESTION 3 OF 10 · IMMUTABILITY

Do you keep at least one immutable or air-gapped copy that a compromised admin account cannot delete?

QUESTION 4 OF 10 · TESTING

Have you restored a complete critical application (not just a few files) in the last six months?

QUESTION 5 OF 10 · TESTING

Do you know — from a test, not an estimate — how long a full recovery of critical systems would take?

QUESTION 6 OF 10 · PROCESS

Is there a documented, rehearsed cyber recovery runbook that says who does what?

QUESTION 7 OF 10 · DETECTION

Would you be alerted to unusual mass deletion, encryption or retention changes in your backups?

QUESTION 8 OF 10 · HARDENING

Is your backup software on a supported version with current security patches?

QUESTION 9 OF 10 · COVERAGE

Are your SaaS applications (e.g. Microsoft 365, Salesforce) backed up by you, not just the provider?

QUESTION 10 OF 10 · COMPLIANCE

Do you know which countries hold copies of your backup data, and do retention periods match your legal obligations?