Skip to content
Talk to us →
Free toolsCV, LinkedIn, logframe, audit checklist, 7 diagnostics · no sign-upFree
AboutOverviewAbout RisalatClients and partnersPortfolioTestimonialsVideo galleryCareers
ProgrammesOverviewProgramme categoriesProgrammes by cityGlobal learning programmesIn-house programmesOnline programmes
SolutionsOverviewCapacity buildingBusiness servicesSurvey and researchEvent managementBusiness registrationIndustries
ToolsFreeOverviewOrganisation diagnosticsCV DesignerLinkedIn Profile AdviserLogframe BuilderAudit Readiness ChecklistCertification preparationDay PlannerAll free tools
InsightsOverviewDesigning a Baseline Survey the Endline Can Actually UseESIA vs. ESMP vs. RAP: A Practical Guide for Project Implementation UnitsLivelihood Restoration Under World Bank ESS5
ContactContact usFAQsRequest an invoiceRequest a proposal
Talk to us →Sign in / create account

Home › Free tools › Cyber Security Basics Assessment

Cyber Security Basics Assessment

This assessment checks the cyber security basics that protect most public institutions and project offices from common attacks such as phishing and ransomware. It covers governance, access, patching, backups, awareness, incident response and suppliers. You get a score by area and clear, low-cost actions.

  • Assessment
  • 10 min
  • Free
  • Saved in your browser

Who it is for

  • Heads of administration and IT in public institutions
  • Project implementation units and small project offices
  • Finance and procurement teams handling payments and sensitive files
  • Managers preparing for audits or donor reviews

What you get

  • A cyber hygiene score across six areas
  • The biggest risks to address first
  • Practical low-cost actions for each area
  • An optional tailored report with a 90-day plan

Questions

Do we need technical knowledge to complete this?

No. The questions are written for managers. If you are unsure of an answer, ask your IT focal point or supplier, or choose the lower option to stay on the safe side.

Why does the tool focus on MFA and backups?

Stolen passwords and ransomware are among the most common causes of serious incidents, and MFA and protected backups are some of the most effective low-cost defences.

Is this the same as a cyber security audit?

No. It is a quick self-assessment of basic hygiene. A full audit or penetration test examines systems in depth and should be done by qualified specialists.

What frameworks is this based on?

The areas reflect widely used good practice, including the NIST Cybersecurity Framework 2.0 and the CIS Critical Security Controls, simplified for small public offices.

Based on

This is a guidance and self-assessment tool, not a security audit or official form; always follow your national cyber security rules and the current version of your donor or financing agreement.

Go further

Digital Readiness AssessmentRequest a tailored proposal

More free tools

e-GP Readiness AssessmentData Governance Maturity AssessmentAll tools →