Free SMB Cyber Readiness Assessment

Free small business cyber security check for New Zealand and Australia

The KIS SMB Cyber Readiness Assessment is a free 11-question check that takes about 5 minutes. It covers identity and access, devices and patching, backup and resilience, and email and people risk. You get a risk rating from Critical to Low and a ranked action plan with effort estimates.

Running a small business doesn’t mean you can ignore cyber security. This quick assessment covers the four areas that matter most for SMBs: identity & access, devices & patching, backup & resilience, and email & people risk. You’ll get a practical risk rating (Critical → Low) and a short list of priorities – no jargon, no obligation.

New Zealand context: References the Privacy Act 2020 and NCSC NZ guidance for small businesses. The Privacy Commissioner expects reasonable security safeguards – this assessment shows you where to focus first.

Australian context: Aligned with the Privacy Act 1988 (Cth), Notifiable Data Breaches (NDB) scheme, and the Essential Eight (light version). Ideal for sole traders, micro‑businesses, and growing SMBs who need a starting point.

This free self‑assessment takes about 5 minutes. Your report includes a risk level, a ranked action plan with effort estimates (Quick Win / Medium / Project), and a private, shareable link.

Ready for a deeper dive? Try our Essential Eight maturity assessment for control‑by‑control analysis, or NIST CSF Lite for a programme‑wide view.

  • Identity & access

    MFA enforcement, separate admin accounts, leaver process.

  • Devices & patching

    Patch SLAs, endpoint protection, device inventory.

  • Backup & resilience

    Automated backups, restore testing, incident response plan.

  • Email & people risk

    DMARC configuration, security awareness training.

  • Clear risk rating

    Critical → High → Moderate → Low. Know your exposure at a glance.

  • Priority action plan

    Ranked list of improvements with effort estimates.