Find where your IT needs attention first

There is a clear support path and response expectation There is a support path, but response expectations are informal People often ask whoever seems technical Issues are handled only when they become urgent Not sure

Rarely; root causes usually get fixed Sometimes; a few recurring issues remain Often enough that people work around them Constantly; the business is mostly reacting Not sure

Yes, with patching, endpoint protection, and alerts reviewed Mostly, but some devices or alerts need cleanup We have antivirus, but visibility is limited No clear device security or monitoring process Not sure

They are planned around business needs, risk, and budget Some planning happens, but renewals still sneak up Decisions are usually made when something breaks or expires There is no clear owner for tools, vendors, or roadmap decisions Not sure

Confident; backups are monitored and restore tests happen Backups exist, but restore testing is inconsistent Not sure what is backed up or how long recovery would take No clear backup or recovery process Not sure

MFA is enforced and admin access is limited and reviewed MFA is mostly used, but admin/access reviews need work Some important accounts still rely on weak or shared access We are not sure who has access to critical accounts Not sure

There is a checklist and access is reviewed There is a basic process, but it depends on the situation Access changes are manual and easy to miss Old accounts or permissions may still exist Not sure

Email protection, training, and reporting steps are in place Some protection exists, but training or reporting is informal People rely mostly on judgment and asking around There is no clear process for suspicious messages Not sure

Well organized, with permissions and sharing reviewed Mostly workable, but cleanup would help People are not always sure where files live or who has access It has grown messy and risky over time Not sure

Approved tools and clear data rules are in place People use AI, but guidance is still being developed A few people experiment without a shared standard We do not know what tools are being used or what data goes into them Not sure We do not currently use AI tools for work

Roles, contacts, and first steps are documented Key people know what to do, but it is not fully documented We would probably figure it out in the moment No clear response plan exists Not sure

Yes, priorities and recovery expectations are clear Mostly, but the plan needs to be written down Only a few people have an informal idea No; we would decide during the outage Not sure