0 / 12 ANSWERED
0%
RTCS Logo
> 2-MINUTE SELF-ASSESSMENT

Would your organization survive a ransomware attack this week?

Answer 12 questions. No email required to see your score. Get an instant readiness rating and the specific gaps most likely to be exploited.

Rethinking Consulting Services (RTCS) is a cybersecurity and managed IT partner based in Springfield, Virginia, serving businesses beyond the region. Backed by experience from 500+ ransomware and incident recovery engagements, we help organizations strengthen security, build resilience, and minimize cyber risks. This tool helps businesses identify vulnerabilities ransomware attackers commonly exploit before an incident occurs.

• 12 questions• ~2 minutes• instant results
QUESTION 1 OF 12•BACKUP & RECOVERY

Do you have at least one backup copy that is offline or immutable, meaning ransomware could not encrypt it even with full network access?

QUESTION 2 OF 12•BACKUP & RECOVERY

Have you actually tested restoring a system from backup in the last 6 months, not just confirmed the backup job ran?

QUESTION 3 OF 12•BACKUP & RECOVERY

Do you know right now how many hours it would take to restore your most critical system from backup?

QUESTION 4 OF 12•IDENTITY & ACCESS

Is multi-factor authentication required for all remote access, admin accounts, and email with no exceptions?

QUESTION 5 OF 12•IDENTITY & ACCESS

Are privileged accounts such as domain admins and IT staff separated from standard day-to-day user accounts?

QUESTION 6 OF 12•NETWORK SEGMENTATION

If one employee laptop were compromised, would the attacker be blocked from moving laterally to your servers or backup systems?

QUESTION 7 OF 12•NETWORK SEGMENTATION

Are critical systems such as servers, backups, and finance systems isolated on separate network segments from general workstations?

QUESTION 8 OF 12•DETECTION & MONITORING

Do you have monitoring in place that would catch suspicious activity outside business hours, including nights and weekends?

QUESTION 9 OF 12•INCIDENT RESPONSE

Do you have a written incident response plan that specifically addresses ransomware, not just a general IT outage plan?

QUESTION 10 OF 12•INCIDENT RESPONSE

Have you run a tabletop exercise, a practice run of your response plan, in the last 12 months?

QUESTION 11 OF 12•AWARENESS & TRAINING

Do employees go through regular phishing simulation training, with results tracked over time?

QUESTION 12 OF 12•GOVERNANCE & INSURANCE

Does your cyber insurance policy's requirements actually match the security controls you have deployed today?

All 12 questions answered! Click to receive your score.