Baseline Controls News Resources Glossary About
Based on Government of Canada Standards

Free Cybersecurity Assessment for Canadian Businesses

Evaluate your organization's security posture against the Canadian Centre for Cyber Security's Baseline Controls. 50 questions, under 30 minutes, completely confidential.

Based on CCCS Baseline Controls
Under 30 minutes
100% free & confidential

No data is stored or transmitted. Your answers stay in your browser.

Three Steps to Better Security

Our assessment is based on the 13 Baseline Cyber Security Controls from the Canadian Centre for Cyber Security.

1

Answer 50 Questions

Evaluate your organization's readiness and security across 13 baseline control areas defined by the Canadian Centre for Cyber Security.

2

Get Your Score

Receive an overall compliance percentage, letter grade, and detailed breakdown by control area.

3

Improve Your Security

Get actionable recommendations for every control area with links to official Canadian government resources.

What We Assess

Based on the Canadian Centre for Cyber Security's Baseline Controls for Small and Medium Organizations.

🚨
Incident Response
BC.1
🔄
Patch Management
BC.2
🦠
Anti-Malware
BC.3
⚙️
Secure Configuration
BC.4
🔐
Authentication
BC.5
🎓
Security Awareness
BC.6
💾
Data Backup
BC.7
📱
Mobile Devices
BC.8
🌐
Network Security
BC.9
☁️
Cloud Services
BC.10
🌍
Web Security
BC.11
👥
Access Control
BC.12
💽
Portable Media
BC.13

50 questions · Under 30 minutes · No data stored

Common Questions

Is this assessment really free?

Yes, completely free with no strings attached. There is no upsell, no email required, and no data collected. This is a community resource for Canadian businesses.

How long does the assessment take?

Most people complete the 50 questions in under 30 minutes. The assessment auto-advances after each selection, so the process is quick and smooth.

Do I need technical knowledge to take it?

No. The questions are written in plain language for business owners and managers. You don't need to be a cybersecurity expert — just answer based on what you know about your organization's practices.

Is my data private and secure?

Your answers never leave your browser. No data is transmitted to any server, stored in any database, or shared with anyone. When you close the page, your answers are gone.

What do I get at the end?

You'll receive an overall compliance score, letter grade (A through F), a visual breakdown of all 13 control areas, top risks requiring attention, and specific recommendations for every question. You can print or save the results.

Who is this assessment designed for?

This assessment is designed for Canadian small and medium businesses (SMBs). It's based on the Canadian Centre for Cyber Security's "Baseline Cyber Security Controls for Small and Medium Organizations" (ITSM.10.089), which is the Government of Canada's recommended security baseline.

Before You Begin

50 questions. 13 Baseline Controls. One clear action plan. This assessment evaluates your organization against the cybersecurity baseline defined by the Canadian Centre for Cyber Security — just answer honestly about your current practices.

The best part? This assessment is built on the 80/20 rule — a few key controls deliver the vast majority of your protection. At the end, you'll get actionable recommendations you can print, download, and share with your team so you know exactly where to focus first.

Cybersecurity Canada is an independent resource and is not affiliated with, endorsed by, or connected to the Canadian Centre for Cyber Security, the Communications Security Establishment, or the Government of Canada.
Educational Use Only: This assessment is an educational self-assessment tool provided free of charge by Cyber Unit Security Inc. for informational purposes only. It is not a security audit, penetration test, compliance certification, or professional consultation. Results, scores, grades, and recommendations are approximate, general in nature, and provided on a best-effort basis. They should not be relied upon as a definitive evaluation of your cybersecurity posture. Cyber Unit Security Inc. accepts no liability for errors, omissions, or any damages arising from the use of this tool or reliance on its results. By proceeding, you agree to our Terms of Use. Read our full Terms of Use.
Question 1 of 50 0%

Cybersecurity Baseline Assessment Report

Based on the Canadian Centre for Cyber Security (CCCS)
Baseline Cyber Security Controls for Small and Medium Organizations

0 percent

For educational purposes only. This report is a general self-assessment provided free of charge on a best-effort basis by Cyber Unit Security Inc. It is not a security audit, compliance certification, or professional consultation. Scores and recommendations are approximate and may contain errors or omissions. No liability is accepted for any damages arising from the use of or reliance on this report. Consult qualified cybersecurity professionals for advice specific to your organization. Full Terms of Use: https://cybersecuritycanada.ca/terms/

For Educational Purposes Only — This report is a general self-assessment provided free of charge on a best-effort basis by Cyber Unit Security Inc. It is not a security audit, compliance certification, or professional consultation. Scores and recommendations are approximate and may contain errors or omissions. No liability is accepted for any damages arising from the use of or reliance on this report. Consult qualified cybersecurity professionals for advice specific to your organization. Full Terms of Use: https://cybersecuritycanada.ca/terms.

Your Cybersecurity Baseline Assessment

0 percent

Security Breakdown by Control Area

How your organization scored across all control areas

Detailed Breakdown

Individual scores and recommendations for all 50 questions

Scoring Scale: None Basic Moderate Strong
Disclaimer — This report was generated by the Cybersecurity Canada Free Assessment Tool, operated by Cyber Unit Security Inc. It is provided free of charge for educational and informational purposes only and on a best-effort basis. This report does not constitute professional cybersecurity advice, a security audit, penetration test, vulnerability assessment, compliance certification, legal advice, or any form of professional consultation. All scores, grades, and recommendations are approximate, general in nature, and based solely on self-reported responses that have not been independently verified. Cyber Unit Security Inc., its directors, officers, employees, and agents accept no liability whatsoever for any errors, omissions, inaccuracies, or for any direct, indirect, incidental, consequential, or other damages arising from the use of or reliance on this report or any information contained herein. Cybersecurity threats and best practices change frequently; this report reflects a point-in-time self-assessment and may not account for current threats or requirements. Organizations should consult qualified cybersecurity professionals and legal counsel before making security decisions. Use of this tool does not create any professional-client relationship. Cybersecurity Canada is not affiliated with, endorsed by, or connected to the Canadian Centre for Cyber Security, the Communications Security Establishment, or the Government of Canada. Full Terms of Use: https://cybersecuritycanada.ca/terms.

Need a hand with any of this?

This report is yours to keep and act on at your own pace. If you'd like help implementing any of the recommendations or just want to talk through your results, the team at Cyber Unit (cyberunit.com) — the people behind this free tool — would be glad to help. No obligation, no pressure.

info@cyberunit.com

Need a hand with any of this?

This report is yours to keep and act on at your own pace. If you'd like help implementing any of the recommendations or just want to talk through your results, the team at Cyber Unit — the people behind this free tool — would be glad to help. No obligation, no pressure.

info@cyberunit.com

Learn More at cyber.gc.ca

Visit the Canadian Centre for Cyber Security for the full Baseline Controls document and additional resources for Canadian organizations.

View Official Document