Could your business recover from a ransomware attack?
Answer 14 questions about backup, accounts and preparedness. Find out where you're vulnerable before an attacker does, plus the first 5 things to fix, in order of priority.
Your score is calculated in your browser. We don't send anything until you ask for the detailed analysis.
WHY IT MATTERS NOW
You have a backup. The question is whether it will save you.
Attacks don't pick by size
They're automated. They look for what's easy to break into and who is likely to pay — and small businesses often tick both boxes.
Backup doesn't mean recovery
Many only find out on the day of the incident that the backup was encrypted too, was incomplete, or takes days to restore.
NIS2 reaches suppliers too
Even if your company isn't directly covered by Romania's NIS2 law (GEO 155/2024), large clients who are covered must check their suppliers' security.
THE CHECK
14 questions, honest answers
"I don't know" is a valid answer. It tells you as much as a "No".
Get the detailed analysis
Your score for each area (backup, accounts, prevention, preparedness) and the first 5 actions to take, in order of priority.
THE TECHNICAL AUDIT
The test shows you the direction. The audit checks what's actually configured.
We don't rely on what someone believes is set up. We actually look at the backup, the accounts and what's exposed, then give you a plan you can follow with us or with your own IT.
- ✓A conversation of about an hour, at your office (Suceava area) or online
- ✓Backup: frequency, offsite copies, immutability and a real restore test
- ✓Accounts: MFA, shared accounts, administrators, Microsoft 365 / Google Workspace
- ✓Exposure: NAS, router, remote access, updates
- ✓A written 4–6 page report within 48 hours, with the first 5 actions and estimated costs
The audit is a technical resilience check aligned with the measures required by NIS2. It is not a compliance certification and does not replace legal advice or the cybersecurity audit required by Romania's national cybersecurity authority (DNSC).
FIXED PRICE
€149 + VAT
For companies with up to 25 computers and a single location. For more locations, we'll send you a quote.
Book the auditNot sure you need it? Start with the free 30-minute assessment.
NIS2 IN SHORT
What NIS2 means for an SME
In Romania, the NIS2 Directive was transposed by GEO 155/2024, approved by Law 124/2025. The competent authority is DNSC, the national cybersecurity directorate. The direct obligations (registration, risk analysis, incident reporting, security measures) mainly apply to medium and large companies in the sectors listed in annexes 1 and 2. Failure to register can be fined up to RON 500,000, and DNSC has already started sanction proceedings.
For a small business, the effect usually comes through the supply chain: a client covered by NIS2 may ask you for evidence that their data is protected and that you can resume operations after an incident.
Frequently asked questions
Is my company covered by NIS2?
It depends on your field of activity (annexes 1 and 2 of GEO 155/2024) and your size. The direct obligations mainly apply to medium and large companies. Small companies are affected mostly indirectly, as suppliers. In the audit we also check this, as guidance.
Does the audit mean NIS2 compliance certification?
No. It is a technical resilience check aligned with the measures required by NIS2. It does not replace legal advice or the cybersecurity audit DNSC requires from essential and important entities.
How is this different from the free assessment?
The free assessment is a 30-minute conversation in which we establish whether anything needs doing, and what. The technical audit actually checks the configurations and ends with a written 4–6 page report and a remediation plan in order of priority.
Why isn't a backup on an external drive or a NAS enough?
Ransomware that gets onto the network also encrypts or deletes copies reachable from that network. You need at least one offsite, immutable copy, and restores must be tested regularly.
Does the free test save my answers?
The score is calculated in your browser. Your answers only reach us if you choose to request the detailed analysis and leave your contact details.