01 · Controls
Technical Security
MFA, backups, firewall, endpoint protection — the technical foundations of your IT defense.
Cyber Risk Check
Which baseline cybersecurity controls has your company implemented? Answer 12 questions for a local self-assessment and practical next steps — free and anonymous, but not an audit.
- About 3 minutes
- No data transmission
Cyber Risk Check
Which baseline cybersecurity controls have you already implemented?
12 questions, local evaluation and next steps — anonymous and free, but not an audit.
Technical Security
Organizational Measures
Data Privacy
Incident Response
~ 3 minutes · Anonymous · Free
64,733
voluntary NCSC reports 2025
57,761
digital offences in 2025
+24.9%
phishing versus 2024
10.8%
companies with cyber cover 2024
Sources: NCSC 2025, FSO 2025, SIA 2024, FDPIC Article 24. Reports and offences are different metrics. The 24-hour duty applies only to covered operators of critical infrastructure; Article 24 FADP requires notification as soon as possible where a high risk is likely.
02 · Organisation
Organization & Privacy
Training, IT responsibility, nDSG compliance — the organizational layers of protection.
03 · Response
Response Capability
Incident response plan and reporting obligations — how quickly can you react in an emergency?
Frequently Asked Questions About the Risk Check
Everything you need to know about the Cyber Risk Check.
-
How long does the Cyber Risk Check take?
The risk check consists of 12 questions and takes about 3 minutes. You receive an instant result with specific recommendations. -
Is my data stored?
No. The risk check runs entirely in your browser. Your answers are not transmitted to a server or stored. The evaluation takes place locally on your device. -
Does the risk check replace a professional audit?
No. The check is a self-assessment of selected baseline controls and measures neither your actual cyber risk nor insurability. A comprehensive analysis requires a professional IT security audit by a specialised provider. -
Which areas are assessed?
The check asks about four areas: technical security (MFA, backups, endpoint protection), organisational measures (training, IT responsibility), data protection and response capability (incident response and reporting channels). -
What does my result mean for insurance coverage?
The result is not an insurance or premium assessment. Insurers use their own risk questions, acceptance criteria and pricing. An insurance broker can compare current quotes using your concrete information.
BTAG Versicherungsbroker AG · Bern
Have questions about cyber insurance?
BTAG clarifies your risk profile and discloses any commission before conclusion. The request does not oblige you to buy.
Quote advice by BTAG Versicherungsbroker AG, Bern — FINMA-registered insurance intermediary.