How Cybersecurity-Ready Is Your Canadian SME?

Discover your SME's real cybersecurity maturity level in just 4 quick questions. This assessment evaluates your current defences against ransomware, phishing, data breaches, and compliance gaps. At the end, you'll receive a personalized security roadmap showing exactly which vulnerabilities need immediate attention—plus a step-by-step action plan to protect your business from the threats targeting Canadian SMEs right now.

How does your SME currently handle employee access to critical systems and data?

Employees use basic passwords with no additional security measures We require strong passwords but haven't implemented multi-factor authentication (MFA) We've implemented MFA for some critical systems but not all user accounts Multi-factor authentication is mandatory across all systems and accounts

What is your current approach to data backups and disaster recovery?

We don't have a formal backup strategy or it's done inconsistently We perform backups occasionally but haven't tested if they can be restored We maintain regular backups following some backup principles, with occasional testing We follow the 3-2-1 backup rule with regular restoration testing and documented procedures

How frequently does your organization conduct cybersecurity training for employees?

We've never conducted formal security training We provided one-time training when employees were hired We conduct annual security awareness training for all staff We run quarterly training with monthly security awareness updates and phishing simulations

How does your SME currently manage software updates and security patches?

We update systems only when absolutely necessary or when we remember to do it We apply patches manually on an irregular schedule without formal planning We have a patch management schedule but sometimes miss updates on certain systems We use automated patch management tools with a documented schedule and 100% compliance tracking