Cyber Risk Check
- About 6 minutes
- 27 questions in 2 parts
- No sign-up
- Scored in your browser
Part 1 · Chapter 1IT governance and visibility
1 / 27
If a serious vulnerability in a software component were announced tomorrow, could you list every affected system within an hour?
You can also answer with keys 1 to 5
Part 1 of 2Everyday protection
Governance, access, vulnerabilities and data: how your IT is run and protected day to day.
Each dot is one question, grouped by area around your organisation in the centre. The map fills in as you answer.
Can you see what you protect, and who owns it? Every other control rests on this.
About this check
Answer 27 questions in two parts and see where your IT governance and security have gaps, and how ready you are for post-quantum cryptography. Your result appears instantly, and your answers are scored inside your own browser.
What it shows
It scores how far your controls are in place across seven areas: IT governance, access, vulnerabilities, data protection, incident response, suppliers and post-quantum cryptography. Part 1, everyday protection, covers the first four; part 2, response and resilience, the last three. You see your weakest areas and what to fix first.
How it scores
Each answer earns 0 to 4 points. Each area becomes a percentage, and the areas are weighted into a score out of 100. "Don't know" scores 0 but is counted separately. So that an average cannot hide them, three items (MFA, critical vulnerabilities and restore tests) are shown as red flags whatever the score.
What happens to your answers
Your answers are scored inside your browser, and progress is saved only in this browser. They leave it only if you ask for the detailed report by email, which sends them to findn once to write the report. If you go on to request a demo, a summary of your result goes into the contact form, where you can read and edit it before sending.
Please note
This is a quick self-check, not a substitute for an audit or a regulatory compliance assessment. The weights are findn's starting values, not an official industry standard.
Standards and sources it draws on
Is it free?
Yes. There is no sign-up. You give an email address only if you want the detailed report sent to you.
Are my answers stored or sent anywhere?
Not unless you ask for the report by email. They are scored inside your browser, and progress is saved only in this browser; choosing "Start over" erases it. If you request the report, your answers and contact details are sent to findn once to write and send it.
Is it only for financial institutions?
No. Any organisation can answer the questions. Financial institutions can also talk to us about how the results relate to the FSA guidelines and the FISC Security Guidelines.
Can I share the result inside my company?
"Share with my manager" puts a summary into an email, "Save as PDF" prints the result as a report, and "Get the detailed report by email" sends you the full report to forward.