Company Name

Moderate operational risk

48/ 100

Top risks

42% · Moderate operational risk

High-impact access gaps

Access is not consistently managed via roles/groups, increasing the chance of oversharing and lingering privileges.

Limited accountability

Without periodic reviews, privileged accounts tend to accumulate and become hard to audit.

Enable MFA for all key systems and email.
Create role-based groups (e.g., Sales, Finance, Admin) and assign access via groups.
Run a monthly review of privileged access and remove dormant accounts.

Do you enforce MFA for email and admin accounts?

Not consistently

Roll out MFA to all users first, then tighten policies for admin roles.

35% · High operational risk

Recovery is untested

Backups that are not regularly restored and verified often fail when you need them most.

When was your last successful restore test?

Not sure

Schedule a 60-minute restore test this month for 1 critical system (email or accounting).

68% · Moderate operational risk

Hidden subscription creep

Tools tend to accumulate over time; even small monthly waste compounds across teams.

Do you review and reclaim unused licenses?

Sometimes

Assign an owner and run a 15-minute monthly check on your top 10 subscriptions.