Information securityYour company's security level already has a number.
Nobody has ever shown it to you.Network architectureWhoever administers your servers sits on the same network as whoever opens the email.
They shouldn't.Mail and collaborationYour email still travels on protocols designed thirty years ago.
Attackers know that.MigrationYou use Google Workspace and wonder whether Microsoft 365 is worth it.
That's a fair question.LicensingHow many licences do you hold, how many do you use, how many are you short?
Almost nobody knows precisely.Identity and accessYou've enabled multi-factor authentication.
On every user?IT costWhen did you last review your Microsoft spend?
For many companies: never.Business continuityYou have a backup. When did you last try restoring it?
Those are not the same question.InsuranceYour cyber policy contains a question somebody else answered.
Do you know what they said?Access lifecycleHow many people who no longer work with you can still get in?
The answer is rarely zero.PrivilegeHow many people, right now, can delete everything?
Almost always more than necessary.ObsolescenceSome of your systems no longer receive security updates.
You probably don't know which.Compliance and supply chainYour clients will send you a security questionnaire.
Do you already know your answer?Data protectionHow many of your documents are open to anyone with the link?
Nobody has ever counted them.Continuity and governanceIf your sysadmin were away for a month, what would stop?
And who would know?Artificial intelligenceBetween saying and doing, there's AI in the way.
And your permissions.CollaborationThree people, one decision, thirty-two emails.
And you already pay for Teams.The human factorHow many of your people would click?
It can be measured without naming anyone.