Team Risk Assessment
For Agencies

Share a short test with a member of your organisation and receive a risk score with recommendations

Check Your Team's Risk Level Before An Attacker Does

Team planing with IT toolkit cubit

Who Is This For?

IT decision-makers and operations leads at London-based creative, PR, comms and marketing agencies who want to:

  • Reduce the chance of a breach through human error
  • Standardise sensible habits across the team
  • Prove to clients that data is handled securely
  • Spot gaps early and fix them fast

What's Inside the Test?

Phishing & Social Engineering

Phishing remains the most common entry point for cyber-attacks. These questions test how well you can spot suspicious messages and social engineering tactics designed to trick you.

Passwords & Authentication

Strong passwords and multi-factor authentication (MFA) are your first line of defence. This section checks how securely you protect your accounts.

Device & Data Security

Keeping devices updated and handling client data correctly is critical. Here we assess how safely you manage technology and information day-to-day.

Physical Security

Not all threats arrive by email – some happen at the office door. This section assess how you protect your workplace from unauthorised access.

Safe Working Environment

Remote and hybrid working bring extra risks. This section looks at how you keep information secure while collaborating with colleagues or working outside the office.

Risk Score

The risk score is the outcome of your staff awareness test. It reflects how likely someone is to fall for phishing or other cyber threats based on their answers.

Understanding Your Risk Level: What Does It Mean?

  • Risk Level 1 – High awareness, low risk
    Strong habits in place. Keep awareness sharp with light, regular refreshers.
  • Risk Level 2 – Medium awareness, moderate risk
    Good intent, but gaps remain. Targeted reminders and short training reduce exposure.
  • Risk Level 3 – Low awareness, high risk
    High chance of error-led incidents. Act now: focused training, clear reporting steps, closer IT oversight.
Levels 1 2 3 Risk
cubit team photo

We’re here to help!

If you’d like help running the test or turning results into an action plan, we’re happy to support.

Frequently Asked Questions

How long does the test take?

About 5–7 minutes per person.

Do we need technical knowledge?

No. The questions are written in plain English with everyday scenarios.

Is this a replacement for phishing simulations?

No – it complements them by measuring general habits and decision-making.

Who should take it?

Anyone with access to client data, email, or shared files – full-timers and freelancers.

How do we share results with the team?

You’ll receive an email summary with details on performance and advice

What happens if we score Risk Level 3?

We’ll give practical steps you can apply straight away and, if you want, we can help deliver a short training session.