{calculation-2} days

Your responses suggest that day-to-day IT issues are currently having a relatively limited impact on productive working time.

IT issues appear to be consuming a noticeable amount of productive staff time and may warrant closer attention.

IT problems appear to be causing a significant level of lost productive time across the business.

Your responses indicate that IT issues may be consuming a substantial amount of productive staff time.

Relatively little additional staff time appears to be spent helping colleagues resolve IT issues.

Some staff time is being diverted each week into resolving IT issues for colleagues.

A noticeable amount of staff time appears to be diverted from normal responsibilities into dealing with IT issues.

Your responses indicate that a substantial amount of internal staff time may be spent supporting colleagues with IT issues.

{radio-3}

Your software subscriptions and licences appear to be reviewed regularly, helping to maintain appropriate allocation and control.

Your software subscriptions and licences receive some review, although more regular oversight may help identify unnecessary or poorly allocated subscriptions.

Infrequent licence reviews can make it harder to identify unused subscriptions, inappropriate licence levels or unnecessary recurring costs.

Your responses suggest that a structured review of software subscriptions and licensing may be worthwhile to confirm that services remain required and appropriately assigned.

{calculation-4} of 6 measures identified

Multi-factor authentication was not identified as an actively managed measure. Reviewing authentication controls may help strengthen protection against compromised credentials and unauthorised access.

Managed endpoint security was not identified as an actively managed measure. Reviewing device protection can help reduce exposure to malware, ransomware and other endpoint-based threats.

Your responses suggest that backup or recovery arrangements may warrant review. Effective continuity depends not only on maintaining backups, but also on confidence that systems and data can be restored when required.

Cybersecurity awareness training was not identified as an actively managed measure. Regular awareness activity can help employees recognise phishing, social engineering and other common threats.

Regular security updates and patch management were not identified as actively managed. A structured patching process can help reduce exposure to known software vulnerabilities.

Your responses indicate that all of the core cybersecurity and continuity measures covered by this assessment are actively managed within the business.