25-Point Cyber Risk Scorecard (lite)

Score your business in 10 minutes. No technical background required.

Instant self-scoring• Covers core Houston cyber risks• Zero sales pressure

Most businesses don't discover their IT gaps until something breaks: a ransomware email gets clicked, a server dies with no tested backup, or a key employee leaves with access still active. This checklist covers the 25 controls we verify first when we assess a Houston client's environment.

How to use this scorecard

Check every item you can confidently answer “yes” to. If you're not sure, leave it blank. “I don't know” counts as a no. Your score updates automatically.

The 25-Point Checklist

Five domains · five questions each

Security Basics

0 / 5

Multi-factor authentication (MFA) is required on email, banking, and all critical business apps.Every computer and server receives security updates automatically, and someone verifies they installed.Business-grade endpoint protection (not free consumer antivirus) runs on every device and is monitored.Inbound email is filtered for phishing, spoofed senders, and malicious attachments.Employees use a password manager instead of reusing or writing down passwords.

Backup & Disaster Recovery

0 / 5

All critical data is backed up automatically every day, including Microsoft 365 / Google Workspace data.At least one backup copy is stored offsite or in the cloud, protected from ransomware (immutable).A backup restore has actually been tested in the last 6 months, not just “the backups ran.”You know how long your business could survive with systems down, and your recovery plan matches it.A written disaster recovery plan exists, and more than one person knows where it is.

People & Policies

0 / 5

Employees receive security awareness training at least annually, with periodic phishing simulations.A written acceptable use policy covers company devices, data, and AI tools.Departing employees have every account and access revoked the day they leave, using a checklist.New hires get access only to what their role requires. Nobody “just gets admin.”Someone is accountable, by name, for reviewing who has access to what at least twice a year.

Network & Access

0 / 5

A business-grade firewall protects your network, and someone actively manages and updates it.Guest Wi-Fi is fully separated from the network your business systems run on.Day-to-day users do not have administrator rights on their computers.Remote access happens only through a VPN or zero-trust tool, never exposed remote desktop.You have a current inventory of every device, server, and software license you own.

IT Management & Support

0 / 5

Your systems are proactively monitored, so problems are caught before employees notice them.When something breaks, you have a guaranteed response time in writing (an SLA).IT issues are resolved right the first time; the same problems don't keep coming back.You have a 12–24 month technology plan and budget, not just break-fix spending.Someone reviews your cyber insurance requirements against your actual controls annually.

Overall Risk Assessment

Your score:0/ 250% covered

High Risk

Significant Exposure

Implementation Progress25 open gaps to address

22–25 Controls: Low Risk

Strong foundation. Keep verifying. Controls drift over time. Regular audits ensure configurations stay intact and compliant.

15–21 Controls: Moderate Risk

Real gaps detected. Covered in some areas, exposed in others. Prioritize unchecked items before an attacker spots them.

0–14 Controls: High Risk

Current Tier

Significant exposure. A matter of when, not if. Get help before an incident forces emergency downtime and expensive recovery.

Every unchecked box is an open door. Let's close them.

Complete the checklist and submit your details to review your results with a Houston engineer.

Whatever your score, book a free, no-obligation consultation. The Link Source has supported Houston businesses since 2019 with 24/7 monitoring, Huntress EDR, and flat monthly pricing.

Free IT Review

Get Your Custom Health Report

Current Score: 0 / 25 (0%) · Significant Exposure

Prefer to talk now?

(281) 598-5580