Free Cybersecurity Risk Assessment – Winbasic

Free Assessment

How Exposed Is Your Business to a Cyberattack?

Answer 12 quick questions about your current setup. We'll score your cybersecurity risk and send your personalised report straight to your inbox.

156%rise in SMB ransomware attacks, 2025

68 daysaverage time to detect a breach

88%of ransomware attacks hit small businesses

$80,850average incident cost, Australian SMBs

Section 1 of 4 — Logins & Identities Step 1 of 5

Section 1 — Logins & Identities

"In 2026, stolen passwords are the #1 way attackers get in — and AI now makes every phishing email look completely real."

1 Do all staff use multi-factor authentication (MFA) for email, Microsoft 365 or Google Workspace, and for each of the cloud apps they use for work?

Yes — MFA is enabled for all staff across all systems Some staff or some systems have it, but not all No / Not sure

2 When a staff member leaves, how quickly are all their accounts, apps, and cloud access disabled?

Same day — we have a documented offboarding process Within a week or so We don't have a set process / Not sure

3 Has anyone in your business received a convincing fake invoice, payment request, or urgent message that appeared to come from a known contact?

Yes — and we caught it before anyone acted Yes — and someone nearly acted on it Not that we know of Not sure

Please answer all questions before continuing.

Section 2 — Devices & Cloud Apps

"Your business probably runs across 5 to 10 cloud platforms. Each one is a potential entry point — and automated tools are scanning them right now."

4 How many cloud apps or platforms does your business use — and do you know who has active access to each one?

Yes — we have a clear list and review access regularly We use several platforms but haven't formally reviewed access We're not sure what we have or who has access

5 Are software updates and security patches applied automatically across all staff devices within two weeks of release?

Yes — managed automatically or by our IT provider We apply them when prompted, but it's not consistent Rarely / Ad hoc / Not sure

6 Do staff use personal devices or personal email accounts to access any business data, files, or systems?

No — we have a clear policy and staff follow it Sometimes, but with some controls in place Yes, freely / We haven't addressed this

Please answer all questions before continuing.

Section 3 — Data & Backups

"Ransomware can encrypt every file in your business in under 4 minutes. If your backups haven't been tested, there's a very good chance they won't work when it matters."

7 How frequently is your business data backed up — and is it stored separately from your main systems?

Daily automated backups, stored offsite or in the cloud — separate from our main systems We have backups but they may not be fully separate or fully automated Occasionally / Not sure / We don't have a formal backup process

8 When did you last successfully test restoring files from a backup?

Within the last 3 months Within the last 12 months Never tested / Not sure we even have a backup

9 If ransomware locked every file in your business tomorrow, do you have a documented plan for what happens next?

Yes — documented, and key people know what to do Roughly — but it's not written down No / We've never thought about it

Please answer all questions before continuing.

Section 4 — Exposure & Insurance

"88% of ransomware attacks in 2025 hit small businesses. Most weren't prepared — and most discovered too late that their insurance didn't cover what they thought it did."

10 Does your business have cyber liability insurance — and have you confirmed it covers ransomware, business interruption, and data breach notification costs?

Yes — and we've reviewed what it actually covers Yes — but we haven't checked the specifics recently No / Not sure

11 Are you aware of your obligations under the Australian Privacy Act if customer or staff data is breached?

Yes — and we have steps in place to meet them Aware of it, but not sure if we're actually compliant Not familiar with it / Not sure it applies to us

12 Before you see your results — how confident are you that your current IT setup would withstand a targeted cyberattack right now?

Very confident — we've had this reviewed recently Somewhat confident — but I have some doubts Not very confident I genuinely don't know

Please answer all questions before continuing.

Almost there

Where should we send your report?

Your personalised cybersecurity risk score is ready. Enter your details and we'll send the full report straight to your inbox.

First name *

Last name *

Business email *

Business name *

Mobile (optional)

Number of staff *

By submitting this form you agree to receive your results report and occasional relevant communications from Winbasic. You can unsubscribe at any time.

Please fill in all required fields.

Your report is on its way.

We've sent your personalised cybersecurity risk report to . Check your inbox in the next few minutes — including your junk folder just in case.

Want to talk through your results? Call us on (07) 3385 0888 or book a free 30-minute IT review at winbasic.com.au — no obligation, no sales pitch.

How Exposed Is Your Business to a Cyberattack?

Where should we send your report?

Your report is on its way.

Services

Managed IT

Strategic IT Consulting

Cybersecurity

Cloud Computing

Communication & Connectivity

Essential 8 Services

Contact Us