Cyber Security Quiz

The vast majority of cyber incidents that hit Australian small businesses don't start with a clever hack — they start with a person clicking, paying, or trusting the wrong thing. A convincing email, a fake invoice, a reused password.

That's good news: it means awareness is one of the cheapest and most effective defences you have. This quiz is a quick, honest way to pressure-test the instincts you and your team rely on every day.

Ten scenarios across the threats small businesses actually face: phishing emails, business email compromise (the "changed bank details" invoice scam), passwords and password managers, multi-factor authentication, public Wi-Fi, suspicious attachments, software updates, oversharing client data, ransomware, and what to do the moment you think you've been hacked.

It's about behaviour and judgement, not technical know-how. For a look at your actual technical defences, the Essential Eight self-assessment is the companion tool.

Yes, and no email is needed to see your result. It runs entirely in your browser and we don't store your answers. We built it because it's useful, and because some people who play it will want help locking things down.

Every answer is based on guidance from the Australian Signals Directorate's ACSC and Scamwatch. It's a simplified, plain-English take for small business owners — not formal security advice tailored to your specific situation.

Don't worry — most people have a gap or two. Start with the topics flagged in your result. To check your actual setup rather than your instincts, try our free Essential Eight self-assessment, or get in touch for a hand.