A 20-question assessment built around the ACSC Essential Eight. You'll get a clear security score, your Essential Eight maturity level, and a prioritised list of the fixes that reduce your risk the most.
~5 minutes · 20 questions · No login to start
Multi-factor authentication
Patching & updates
Backups & recovery
Admin privileges
Application control
Staff awareness
Most Australian small businesses know cyber security matters, but few can say clearly how protected they actually are. The risks — ransomware, email account takeover, phishing, data theft — rarely announce themselves until something breaks, and "we've got antivirus" is no longer a real answer. The Cyber Security Health Check turns that vague worry into a clear picture. It's a short, structured self-assessment built around the Australian Cyber Security Centre's Essential Eight, giving you a security score, a maturity level, and a ranked list of the fixes that reduce your risk the most.
The tool walks you through a set of plain-English questions covering the Essential Eight mitigation strategies — multi-factor authentication, patching and updates, backups, restricting admin privileges, application control, Office macro settings, application hardening, and operating-system currency — plus supporting controls like staff training, email authentication (SPF/DKIM/DMARC), incident response planning, device/BYOD management, remote-access security, access monitoring, and cyber insurance. For each area you pick the answer that best matches how your business operates today. It then scores your responses to produce an overall security posture, maps your Essential Eight controls to the ACSC's maturity scale (which runs from ad-hoc through to monitored and continuously improving), breaks down your score control-by-control, and orders your gaps as prioritised "quick wins" — weakest and highest-impact first, with a rough effort estimate for each. It's a directional self-assessment to show you where to focus, not a formal audit.
Owners and managers of Australian small and medium businesses who want a clear, jargon-free read on how exposed they are and where to fix things first.
The short answers are here. For anything else, ask below or get in touch.
The Essential Eight is a set of baseline cyber security mitigation strategies published by the Australian Cyber Security Centre (ACSC). It covers the controls that block the most common attacks — things like multi-factor authentication, prompt patching, application control, restricting admin rights, and regular tested backups. It's the closest thing Australia has to a common security yardstick for smaller organisations, which is why the check is built around it and reports your progress against the ACSC's maturity scale rather than an arbitrary vendor checklist.
These tools work together to give you a clearer picture of your business.
Use these results to make better decisions. If you'd like a second pair of eyes on them, an advisor can walk through what they mean for the business.
Valont Insights covers what actually runs your business, finance, people, operations and growth, written for Australian owners, readable in five minutes.
Join 1,380+ Australian owners. No spam, unsubscribe anytime.
See what's inside →