All Industries · Free Resource

Business IT Risk Assessment Guide

The same 5-domain framework enterprise IT teams use, scored for a growing NYC business — plus a 90-day roadmap for closing what you find. Save this page or print it (Ctrl/Cmd+P).

Security

Endpoint protection, MFA everywhere it matters, and someone actually watching for anomalies — not just tools installed and forgotten.

1 — No formal controls3 — Basic tools in place5 — Monitored & tested

Compliance

Documented policies matching whatever actually applies to you — HIPAA for healthcare, SEC/FINRA for financial services, the NY SHIELD Act as a baseline for everyone.

1 — Nothing documented3 — Some policies exist5 — Current & audit-ready

Continuity

Backup that's actually been restored from, a documented recovery plan, and a realistic sense of how long you could survive a systems outage.

1 — Backup exists, untested3 — Backup verified periodically5 — DR plan tested annually

Performance

Network reliability, help desk response time, and whether your systems can actually handle the growth you're planning for.

1 — Frequent slowdowns3 — Occasional issues5 — Consistently reliable

Vendor Risk

Signed agreements (BAAs where relevant) with every vendor touching sensitive data, and no single vendor holding more risk than you've accounted for.

1 — No vendor review3 — Contracts on file5 — Reviewed annually

Your 90-Day Remediation Roadmap

Once you've scored all 5 domains, close the gaps in this order — it's the sequence that reduces the most risk per hour spent.

Days 1–30

Fix critical security gaps

MFA on every account that doesn't have it, backup restore actually tested, any domain scored 1–2 addressed first.

Days 31–60

Close compliance documentation gaps

Written policies, signed BAAs/vendor agreements, and a real incident response plan — the paperwork an auditor or insurer will actually ask for.

Days 61–90

Formalize an ongoing review cadence

Quarterly checks on continuity and vendor risk so this doesn't quietly drift back to where it started.

This page is yours to keep — bookmark it, print it, or share it internally.

Free Consultation

Want Wlad to Score This For You?

Book a free 30-minute Risk Review. Wlad will walk your actual environment across all 5 domains and give you a written report within 24 hours — at no charge.

Schedule My Free Risk Review →

Questions first? Send us a message or call (516) 734-1515