ACELA IT & Security Risk Scorecard.
Get a personalized score across 6 categories of risk in about 4 minutes. Honest answers, honest score, no sales pitch.
What you'll get
24 quick questions across the 6 areas where most SMB IT environments quietly accumulate risk. You'll see your running score live, get a category-by-category breakdown, and a personalized written report by email.
We built this around the same evaluation framework our senior engineers use on paid discovery engagements, so you're getting a real risk baseline, not a lead-magnet quiz that pretends everyone's environment is broken. Whether you score a 60 or a 95, you'll walk away with a concrete list of the two or three things worth fixing first.
What each category actually tells us.
These aren't arbitrary. Every one is a place we've watched a small, ignorable problem turn into an expensive, embarrassing incident. Score honestly and you'll get an honest answer about where your risk actually sits.
Support & Accountability
If support feels random, the environment usually is.
Why it matters: Slow, inconsistent support is where trust erodes first. If your team dreads opening a ticket, they'll paper over problems until something breaks in public.
Documentation & Operational Discipline
A lot of businesses think they have IT documentation when they really have tribal knowledge.
Why it matters: Missing documentation isn't a minor inconvenience, it's how a two-hour outage becomes a two-day outage and how a departing admin walks out with the keys.
Microsoft 365 & Identity Security
A lot of SMB risk lives inside Microsoft 365, especially around identity and stale admin access.
Why it matters: M365 is the identity and data platform for most SMBs, and misconfigured baselines are the number-one entry point for account-takeover ransomware.
Backup & Business Continuity
Most environments have backup. Restorable, monitored, understood backup is rare.
Why it matters: Backups only count if they've been restored recently. The gap between 'we have backup' and 'we can recover' is where most disaster stories live.
Vendor Access & Third-Party Risk
SMB environments quietly accumulate unmanaged vendor access and forgotten exceptions.
Why it matters: Every third-party login is a door to your data. Unmanaged vendor access is one of the highest-impact, lowest-effort risks in an SMB environment.
Network Security & Standardization
A surprising amount of business risk comes from network shortcuts that seemed harmless when they were added.
Why it matters: Flat networks, unpatched firewalls, and open Wi-Fi are how a single infected laptop becomes a company-wide incident. Segmentation and hygiene matter.
Rather walk through it with a human?
A senior ACELA engineer will go through these questions with you live, 30 minutes, no pitch.