Small Business Cyber Security Health Check

Why You Need This

Small businesses are increasingly targeted — and most don't have the resources to recover. The Privacy Act requires you to take "reasonable steps" to protect personal information, with penalties up to $50 million for serious breaches. Customers and suppliers expect security too. This health check shows you exactly where you're vulnerable and what to fix first—in plain English, without technical jargon.

What You Get

78

Plain-English Questions

Across 12 security domains—no technical knowledge required

Clear Security Score

See exactly where you're protected and where you're exposed

Prioritised Actions

Gaps ranked by risk, then turned into a phased action plan you track to completion first

Professional Reports

Comprehensive Word report with scores, recommendations, and improvement plan

What your results look like

Finish in about an hour and you get a clear overall score, a breakdown across every security domain, and every gap turned into a prioritised action plan you can track and export. (Example output.)

Cyber Security Health Check results screen showing an overall score and maturity across Essential, Recommended and Advanced practice levels — Your overall score, plus maturity across Essential, Recommended and Advanced practices.

Domain Maturity Analysis showing a score-by-domain bar chart and a gap risk distribution pie chart — A breakdown across every security domain, with your gaps grouped by risk level.

What You're Doing Well section highlighting the security areas where the business is already strong, with a score and an Excellent rating — It's not just problems — it highlights what you're already doing well, too.

Identified Gaps table listing each gap with time, cost, urgency, risk and priority, plus a plain-English recommendation — Every gap ranked by priority, each with a plain-English recommendation.

Action Register table listing chosen actions with owner, due date and status, plus a Download register Excel button — Turn gaps into a tracked action register — owner, due date, status, export to Excel.

What You Receive

Every assessment generates a comprehensive report. Download a sample below.

Summary Report

Plain-English findings with scores, prioritised improvement plan, risk associations, and resources

Download Sample

How It Works

Open the HTML file in your browser, answer the questions, download your report. About 60 minutes. No technical knowledge required—the questions are written in plain English for business owners, not IT professionals. Progress saves automatically.

Your Data Stays Private

Everything runs locally in your browser. Nothing is sent to us or anyone else.

Who Is This For?

Any small business owner, operator, or manager who wants to understand their cyber security posture. Retailers, trades, professional services, hospitality, manufacturing—if your industry isn't covered by one of our specialised health checks, this general assessment covers the security fundamentals that matter for every business. No IT background needed.

Looking for your industry?

Accounting · Bookkeeping · Legal · Financial Planning · Mortgage Broking · GP Clinics · Allied Health · Real Estate · Childcare · NDIS Providers

AI-Powered

Your Assessment Includes a Personal AI Security Advisor

Two AI assistants are built into the tool — one to help you during the assessment, one to help you make sense of your results. Like having a security professional on call.

During the assessment

Not sure what a question is asking? Just ask.

Every question in the assessment has an AI helper built in. Tap it and ask anything — "What does this question actually mean?", "Can you give me an example?", "Why does this matter for my business?" — and you'll get a plain-English explanation instantly.

✓ Explains technical concepts in everyday language
✓ Gives real-world examples relevant to your industry
✓ Never suggests how to answer — just helps you understand
✓ No technical background required to complete the assessment

AI question helper explaining a cyber security question in plain English during the assessment

Assessment question interface showing radio button answer choices and plain English guidance

After you finish

Available the moment you see your results.

Once your results are in, an AI security advisor can answer any question about what they mean — in plain English, like talking to a security professional. It can even draft a phased action plan from your specific gaps — what to fix first, next, and over time.

✓ "Explain my highest risk gap in simple terms"
✓ "Walk me through how to fix action #3"
✓ "Which gaps are easiest to fix myself?"
✓ Ask anything — your advisor knows your specific results

AI Personal Security Advisor chat interface showing results-based guidance after completing the health check

Get the Small Business Cyber Health Check

Get My Health Check

$499 + GST

Instant download · 30-day money-back guarantee · Runs entirely on your device

Common Questions

Why do small businesses need a cyber security health check?

Small businesses are now the most common target of cyber attacks in Australia. Criminals target them specifically because they hold valuable customer data but typically have fewer security controls than large organisations. The Privacy Act applies to many small businesses — particularly those handling health information, running on government contracts, or turning over more than $3 million annually. A health check gives you a clear picture of where you stand.

What does the Small Business Health Check cover?

The health check covers password and access management, multi-factor authentication, email security, software and device updates, data backup and recovery, staff security awareness, remote access controls, and your obligations under the Privacy Act 1988. Questions are written in plain English — no technical background required.

How long does it take and what do I need?

Most small businesses complete the health check in 45–90 minutes. You need a computer or tablet and a browser — no app, no account, no installation. Your answers are saved automatically so you can pause and return. The assessment runs entirely in your browser and your data never leaves your device.

What do I receive at the end?

You receive a professional Word report with an overall security score, a domain-by-domain breakdown, and a prioritised action list — critical gaps first, lower-risk items last. The report is suitable for sharing with your IT provider, cyber insurer, accountant, or keeping on file as evidence of due diligence under the Privacy Act.

View all frequently asked questions →

What Actually Happens When a Small Business Gets Hacked

The real costs, downtime, legal obligations, and recovery timeline of a cyber incident — and why 1 in 5 small businesses don't survive one.

Read the guide

Small BusinessCyber Security Health Check