How to use EvRisko, the cyber risk dashboard for non-technical managers
A quick walkthrough of how EvRisko, the IT risk self-assessment tool for small business, turns a short questionnaire into a cyber risk score and a prioritized fix list — from your first company profile to your first assessment, start to finish, in about 25 minutes.
Follow these four steps
Create your company profile
Answer the risk questionnaire
Review your dashboard
Work through your fix list
Tell us the basics: size, industry, and the systems your business runs on. This is what EvRisko uses to tailor your IT risk assessment to your actual setup, not a generic checklist.
What the IT risk assessment covers
EvRisko assesses up to 15 IT risk domains. The domains in your assessment are selected from your company profile, so you only answer questions that apply to your business.
The trial assessment covers 5 out of a possible 15 domains.
Start your trial assessment →Access control & identity management
Who can access what, multi-factor login, passwords and admin accounts.
Device security
Laptops, phones and servers: encryption, antivirus and updates.
Email security
Phishing, spam filtering and protection against fake emails sent in your name.
Employee awareness & training
How well your staff spot and report threats.
Incident response & business continuity
What happens when something goes wrong, and how quickly you recover.
Data backup & recovery
How often data is backed up, where copies are kept and whether restores are tested.
Cloud & SaaS security
How cloud services and business apps, such as email, file sharing and CRM, are set up and secured.
Network security
Firewalls, Wi-Fi and remote access that protect your office and systems.
Governance & security policy
Who owns IT security, and the policies and reviews that keep it on track.
Data protection & privacy
How personal and client data is collected, stored and deleted, including GDPR.
Payment security
How card and payment data is processed and protected, in line with PCI DSS.
Vendor & third-party risk
How you check and manage suppliers that access your systems or data.
Physical security
Access to offices, server rooms and equipment.
Website security
How your website is protected, kept up to date and monitored.
Change management
How changes to systems and software are approved, tested and recorded.
What you'll have at the end
No spreadsheets, no jargon: just clear answers and simple next steps.
* Features for the trial are limited.
A 0–100 cyber risk score, broken down by area
One number for the board, with the detail behind it for whoever does the work.
A ranked action plan
Recommendations ordered by how much each one lowers your risk.
An exportable report
A PDF you can share with your board, insurer or clients.
Questions? Get in touch
Send us a request and we'll get back to you by email, usually within one business day.