How exposed is your business, really?
Ten questions. About three minutes. Written for owners and operators, not IT staff, and "not sure" is always a valid answer.
- Matched to your size and industry
- About three minutes
- Your score emailed to you
- A free IT audit for every participant
Self-assessment
Ready when you are.
You’ll answer a few questions about your business first, so the ten scored questions fit you. Your answers stay with Infinity Network Solutions.
Ten questions, picked for your business.
Five questions everyone answers, matched to the size of your organization, plus five chosen from more than 40 based on your industry and the systems you use.
Backup and recovery
Whether you could actually get your files back, and how fast, after deletion, corruption or ransomware.
Access control
Multi-factor sign-in, who owns access, and whether anyone reviews it.
Email and phishing
Whether your people would spot a convincing fake, and whether that's ever been tested.
Incident readiness
Who you'd call in the first hour of an attack, and whether the plan has been practised.
Risk and insurance
Who pays for a breach, and whether your policy covers what would really happen.
Your industry
Client data proof, payment fraud, patient privacy, job-site devices, donor data and more.
Your systems
Microsoft 365, cloud, servers, databases, payment systems, remote staff and business software.
Email security (optional)
Add a work email and we also check your domain's SPF, DKIM and DMARC.
Three minutes. No jargon.
Tell us about you
Your size, industry and the systems you use, so the questions fit.
Answer 10 questions
Written for owners and operators, not IT staff. "Not sure" is always an honest option.
See your score
A score out of 100, a plain-English verdict and a breakdown by category, also emailed to you.
Book a free IT audit
Every participant can book one. Our engineers check which of your answers hold up in practice.
Built so "probably fine" doesn't score well.
Most businesses that suffer a breach believed they were covered. A backup that’s never been restored, multi-factor sign-in for “most” people, a response plan nobody has read: each sounds reasonable, and each is exactly what attackers count on.
So the scoring is deliberately strict. “Not sure” earns nothing, and full marks need a specific, verifiable practice, not a general assurance. A low score isn’t a failure; it’s a list of the places to look first.
- Critical exposure (0 to 39)Several core defenses have real gaps.
- Significant gaps (40 to 59)Some real protection, with real holes next to it.
- Better than most (60 to 79)A solid foundation, but not full coverage.
- Strong, with blind spots (80 to 100)Mature, and still worth a technical second look.
Is the IT risk assessment free?
Yes. It takes about three minutes, and every participant can book a free IT audit afterwards, whatever their score.
Who should fill it in?
An owner, executive or office manager. The questions are written for the people who run the business, not IT specialists. If you don't know an answer, "not sure" is the honest choice.
Why do you ask for my contact details?
We use them to show and email your personalized report, and to follow up about an IT audit if you want one. Your consent is recorded with the assessment, as Canadian privacy law requires.
How is this different from a real IT audit?
This is self-reported, so it shows where to look. An IT audit is our engineers checking your actual systems, accounts, backups and configuration, and turning the findings into a prioritized plan.
Do you check anything technical?
Only if you add a work email: we look up your domain's public email security records (SPF, DKIM and DMARC). You can also run the full free email security check at /email-security-check/.
Can I talk to someone instead?
Of course. Call 416.235.0931 or use the form below.
Rather talk it through?
Tell us what worries you most and an engineer will reply within one business day.
Tell us about your IT.
We answer almost every inquiry within one business day.