AI Threat Assessment

Question 1

How do you log in to your computer?

I use a password

I use a pin code, fingerprint, face or device recognition (passwordless login)

I use a hardware token (such as USB drive or keyfob)

I’m not sure

Question 2

Have you assessed the extra security requirements that high-risk staff like directors and finance managers require in your business?

Yes

No

I’m not sure

Question 3

How do you handle suspicious emails?

I report them

I delete them

I don’t receive suspicious emails

I’m not sure

Question 4

Can you or your team access work emails or company data on their personal devices?

Yes – some of us use personal phones/computers

No – only approved company devices can be use

I’m not sure

Question 5

How often do you receive cyber security training?

Every 1-3 Months

Every 3-6 Months

Every 6-12 Months

Never

Question 6

Do you get alerts when users log in from an unknown location such as when they go on holiday?

Yes – Our IT team is notified of unusual login locations and will check with the appropriate member of staff internally to verify

Yes - Our managed IT provider is notified, and they assess the risks and will contact us to confirm any abnormalities

No – We don’t have this set up

I’m not sure

Question 7

Do your staff currently use AI tools?

ChatGPT/Google Gemini/Claude etc with a free account

ChatGPT/Google Gemini/Claude etc with a paid for account

ChatGPT/Google Gemini/Claude etc with a company team account

Microsoft 365 Copilot for Work

No

I'm not sure