Team Risk Assessment
For Agencies
Share a short test with a member of your organisation and receive a risk score with recommendations
Check Your Team's Risk Level Before An Attacker Does
Who Is This For?
IT decision-makers and operations leads at London-based creative, PR, comms and marketing agencies who want to:
- Reduce the chance of a breach through human error
- Standardise sensible habits across the team
- Prove to clients that data is handled securely
- Spot gaps early and fix them fast
What's Inside the Test?
Phishing & Social Engineering
Phishing remains the most common entry point for cyber-attacks. These questions test how well you can spot suspicious messages and social engineering tactics designed to trick you.
Passwords & Authentication
Strong passwords and multi-factor authentication (MFA) are your first line of defence. This section checks how securely you protect your accounts.
Device & Data Security
Keeping devices updated and handling client data correctly is critical. Here we assess how safely you manage technology and information day-to-day.
Physical Security
Not all threats arrive by email – some happen at the office door. This section assess how you protect your workplace from unauthorised access.
Safe Working Environment
Remote and hybrid working bring extra risks. This section looks at how you keep information secure while collaborating with colleagues or working outside the office.
Risk Score
The risk score is the outcome of your staff awareness test. It reflects how likely someone is to fall for phishing or other cyber threats based on their answers.
Understanding Your Risk Level: What Does It Mean?
- Risk Level 1 – High awareness, low risk
Strong habits in place. Keep awareness sharp with light, regular refreshers. - Risk Level 2 – Medium awareness, moderate risk
Good intent, but gaps remain. Targeted reminders and short training reduce exposure. - Risk Level 3 – Low awareness, high risk
High chance of error-led incidents. Act now: focused training, clear reporting steps, closer IT oversight.

We’re here to help!
If you’d like help running the test or turning results into an action plan, we’re happy to support.
Frequently Asked Questions
How long does the test take?
About 5–7 minutes per person.
Do we need technical knowledge?
No. The questions are written in plain English with everyday scenarios.
Is this a replacement for phishing simulations?
No – it complements them by measuring general habits and decision-making.
Who should take it?
Anyone with access to client data, email, or shared files – full-timers and freelancers.
How do we share results with the team?
You’ll receive an email summary with details on performance and advice
What happens if we score Risk Level 3?
We’ll give practical steps you can apply straight away and, if you want, we can help deliver a short training session.