fontax GmbH
Quick check Remote support Get in touch

Security quick check for businesses

Free security quick check: 22 questions on emergency plan, accounts, backup, updates, e-mail and remote access – with traffic lights, recommendations and a cyber insurance note. Nothing is stored.

22 short questions, about 5 minutes. At the end you get a traffic light per area, concrete recommendations and a note on cyber insurability.

Organisation & emergency

Is there a named person responsible for IT security (internal or service provider)?

Is there a written emergency plan for a cyber attack (who does what, key phone numbers also on paper)? Insurer

Is there an inventory of all devices, software and cloud services in the company?

Access & accounts

Is multi-factor authentication (MFA) active for e-mail/Microsoft 365 and all remote access? Insurer

Are administrator rights only used with separate admin accounts (not in the daily work account)? Insurer

Are departing employees’ accounts disabled on their last working day?

Does everyone use a password manager or a separate password for each service?

Backup

Is all important data backed up automatically at least daily? Insurer

Is there a copy protected against ransomware (offline or immutable)? Insurer

Has a restore been tested successfully in the last 12 months? Insurer

Is Microsoft 365 data (mail, OneDrive, SharePoint, Teams) also backed up separately?

Updates & devices

Are security updates for operating systems, browsers and Office installed within a few days? Insurer

Are no systems running without vendor support any more (e.g. Windows 10, Server 2012, Office 2016/2019)? Insurer

Is centrally monitored antivirus or EDR active on all devices? Insurer

Are laptops and mobile devices encrypted and lockable if lost?

E-mail & people

Are SPF, DKIM and DMARC set up for your own domain? Insurer

Are e-mails filtered for spam, phishing and malware before delivery?

Are all employees trained on phishing and scams at least once a year? Insurer

Are changed bank details or urgent payment instructions always confirmed by phone?

Network & remote access

Is remote access only possible via VPN or a secured service (no open RDP ports)? Insurer

Is the network divided into segments (e.g. servers/clients separated, production/OT or point-of-sale systems isolated, guest Wi-Fi separated from the company network)? Insurer

Are firewall and router up to date and is their configuration reviewed regularly?

No data is stored or transmitted. The evaluation runs entirely in the browser. Non-binding initial assessment – it does not replace an on-site review.

Background

Where does your IT security stand?

Most successful attacks on small and medium-sized businesses exploit the same gaps: missing multi-factor authentication, no secure backup, outdated systems and open remote access. The quick check shows within minutes where the biggest levers are.

Discuss the result?

fontax goes through the open points together and implements them sensibly – on request as a CyberRisikoCheck according to DIN SPEC 27076.

Get in touch