How it works

Establish. Prioritize.
Fix. Verify. Maintain.

The guided process you’d expect from a cybersecurity advisor — built into a workspace you keep.

Spend smarterFix the highest-impact gaps first.
Save timeSkip the research and guesswork.
Show your workBuild proof for customers, insurers, and leadership.

See CRK in action

Watch one answer turn into action and proof.

CRK does more than record an answer. It shows what to do next, prepares the work where it can, tells you what proof matters, and keeps that evidence organized.

Plays automatically · about 30 seconds · no clicking required
Cyber Readiness Checkup · sample workspace
Playing automatically

Question 3 of 6 · Administrative access

Are administrator accounts protected with multi-factor authentication?

Choose the answer that best matches what is true today. CRK will use it to guide the next step.

Yes — it is required for administrator accounts
Not sure — I need to confirm
No — it is not consistently required
Not applicable
Proof matters when the answer is Yes. CRK will show you what evidence can support this protection.
Your next move is clear

Protect administrator access — and keep the proof.

CRK has connected the answer, the recommended action, and the evidence needed to support the result.

Confirm MFA coverage for every administrator account

Review the account list, close any coverage gaps, and keep the provider export or settings evidence with this protection.

Priority action
Continue guidanceView saved proof
Now see yours

Try Cyber Readiness Kit FREE and see what it finds in your business.

Start with the free six-question Cyber Readiness Checkup and see where your business should focus first.

Start your FREE Checkup 6 questions · about 10 minutes · no credit card · no sales call
Answer based on what is true today. You can revisit it later.Save & continue

One practical question. No technical translation required.
  1. 01

    Establish your cyber readiness baseline

    CRK learns how your business actually operates across the readiness areas that apply to you and builds your starting position.

    The guided questions are written for business owners, not engineers. If something needs technical confirmation, CRK tells you exactly what to ask your provider.

    “I'm not sure” is useful information. An unknown around backups, access, or response is something the baseline needs to surface.
  2. 02

    Prioritize what matters

    CRK connects current conditions, important unknowns, and available evidence to business impact so you know which weaknesses deserve attention first.

    You get a short list in priority order instead of a flat checklist of everything that could possibly be improved.

  3. 03

    Fix the gaps

    Work through clear guidance showing what needs to change, who should own it, what “done” looks like, and what to ask your IT provider.

    The goal is not a better score. The goal is to change the conditions that could change the outcome of an incident.

  4. 04

    Verify the improvements

    Upload a focused screenshot, report, export, policy, or provider statement where proof matters. CRK reviews it and tells you whether it supports the protection you believe is in place.

    • Confirmed. The condition is supported by evidence.
    • Contradicted. The evidence exposes a gap that still needs work.
    • Unverified. CRK tells you what proof is still missing.
    Do not upload secrets. No passwords, keys, or account numbers are needed.
  5. 05

    Maintain readiness

    Keep your baseline current as improvements are completed and your business changes. Now progress is something you can show to leadership, customers, brokers, or insurers.

What you end up with

A record you can act on — and show.

  • Readiness statementA direct view of where the business stands.
  • Likely attack narrativeThe plausible path in and what would interrupt it.
  • Recovery confidenceWhether operations could be restored.
  • Verified strengthsWhat is working, with proof attached.
  • Critical unknownsWhat still needs confirmation.
  • Prioritized action planOwnership, expected outcome, and proof of completion.
  • Provider discussion guideClear questions for IT or your MSP.
  • Readiness baselineA dated record you can update and measure progress against.

Practical questions

Before you start.

How long does it take?

The free Cyber Readiness Checkup takes about ten minutes. Most businesses establish their full readiness baseline across a few sittings.

Do I need to be technical?

No. Where technical confirmation is needed, CRK tells you what to ask.

What if I already work with an MSP?

Good. CRK makes the relationship more specific by showing what is in place, what is assumed, and who owns the next step.

What happens to my data?

It is encrypted and private to your organisation. Evidence is used only to evaluate readiness.

Is this a scan or penetration test?

No. Nothing is installed and nothing touches your systems.

See it before
you buy it.

Six questions. Two pieces of evidence. About ten minutes.

Start your Cyber Readiness Checkup →

Free. No credit card. No sales call.