IT Health Assessment

This assessment surfaces risk, highlights gaps, and identifies where your technology is either holding you back or setting you up for growth.

9

Domains

27

Questions

~6 min

To complete

First Name *
Last Name *
Work email *
Organisation *
4% completed
How clearly defined are your technology goals, and does leadership have visibility of how technology performs against business objectives? *
7% completed
Is there clear accountability for technology decisions, and does your technology budget reflect business priorities? *
11% completed
How confident are you that upcoming regulatory or compliance requirements are factored into your technology planning? *
15% completed
How structured is your IT governance, and do the Board or senior leadership have active oversight of technology and cyber risk? *
19% completed
Do you maintain a formal technology risk register that is actively reviewed? *
22% completed
How are regulatory and compliance obligations tracked and evidenced within IT? *
26% completed
Is there a recognised security framework in place (e.g. Cyber Essentials, NIST, ISO 27001)? *
30% completed
How well are user identities protected (e.g. MFA, privileged access), and what security awareness training is provided? *
33% completed
Does your firm have a tested incident response plan, and how regularly do you assess your security posture (e.g. pen testing)? *
37% completed
How well understood is your IT architecture, and how are critical applications identified and governed? *
40% completed
Are there known single points of failure or legacy systems, and how proactively is infrastructure monitored? *
44% completed
Do you have defined and tested recovery objectives (RPO/RTO) and disaster recovery for critical systems? *
48% completed
Are devices centrally managed, standardised, and kept compliant with security policies? *
51% completed
How well are joiner, mover, and leaver processes managed from an IT and access perspective? *
55% completed
How secure is remote access, and how well is 'shadow IT' (unapproved tools) understood and controlled? *
59% completed
Does your firm have an AI Acceptable Use Policy governing how AI tools can be used? *
63% completed
What AI tools are in use (and how were they assessed), and what AI education has been provided to the business? *
66% completed
How clearly defined is your firm's AI strategy — including use cases, risks, and roadmap? *
70% completed
Do you have a trusted single source of truth for key data, with clear ownership for data governance and quality? *
74% completed
How reliable and timely are your management reports — and is reporting largely manual or automated? *
77% completed
How well is sensitive data classified, tagged, and protected across the firm? *
81% completed
How clearly is your IT support model defined, and are SLAs defined and measured with providers and the business? *
85% completed
How are IT incidents and issues tracked, managed, and used to drive improvements? *
88% completed
How are IT changes reviewed, approved, and documented before implementation? *
92% completed
Do your internal teams have sufficient IT capability, and what training/development supports their technology skills? *
96% completed
Do users feel they are getting value from the technology available to them? *
100% completed
How well-defined is your operating model (in-house vs outsourced), and does it support the business as it grows? *