KMU Cyber-Audit

Forty employees, no IT department, and a customer wants to know how your IT security is doing. KMU Cyber-Audit walks you through 29 checkpoints of basic IT security — in plain language, no jargon, with a result on paper at the end.

WHAT THE CHECK IS BUILT ON
On our own checklist for small and micro businesses up to roughly fifty employees: 29 points in six areas, six of them marked "do first" because they close the most common routes of attack. Every point references the matching controls of ISO/IEC 27001. No certificate, no mountain of paperwork — a stocktaking that fits a business which also has to run itself.

WHY SMALL BUSINESSES DO THIS
• Because an encrypted server without a backup stops the business for weeks, and most attacks on small companies are not targeted but automated
• Because customers, contracting authorities and cyber insurers now send questionnaires that have to be answered
• Because the conversation with your IT service provider goes more smoothly if you already know where you stand
• Because "we really should do something about it" needs a list you can work through

THE SIX TOPIC AREAS
• Leadership & overview — 3 points
• People & rules — 4
• Access & accounts — 5
• Devices & software — 5
• Network & communication — 5
• Backup & emergency — 7
From the device inventory through two-factor sign-in, e-mail protection and a restore test for your backup to keeping the guest network away from the company network.

STEP BY STEP INSTEAD OF JARGON
For every point: one sentence for the owner on why it matters. Three to five steps a business without an IT department can actually take. The mistakes that typically happen along the way. What works as evidence. Plus effort, ownership — management, IT, service provider or staff — and suitable tools, open source first.

WHERE YOU STAND
Ratings from 0 (not implemented) to 4 (continuously improved), maturity per topic area and overall, radar chart, gap analysis. Quick-start mode shows only the "do first" points — enough for a first evening.

THE RESULT AS A PDF
Management summary, overview with gap analysis, every open point in full length, detail pages with your notes. IT service providers add their firm, logo and colour and pass the report straight to their clients. CSV export included.

SEVERAL BUSINESSES, SEVERAL YEARS
Each assessment carries its own company details — for your own business or for client engagements. The comparison shows the progress.

YOUR BUSINESS, YOUR DATA
Everything stays local on the device. No account, no cloud, no tracking, no network request. Face ID or Touch ID lock optional, backup as a portable file.

FREE AND PRO
One point per area — six of 29 — stays free forever, ratings and radar included. Pro opens the rest and adds the PDF report, CSV and backup export, report branding and unlimited assessments — monthly or yearly subscription, or a one-time purchase that never renews.

LANGUAGES
German, English, French, Italian and Romansh as clearly marked translations.

WHAT THIS APP IS NOT
Not a certificate, not an audit and not a check under any standard or by any authority — the checklist is the publisher’s own. The app does not replace advice from an IT security professional. Subscriptions renew automatically until cancelled in the App Store settings.

Terms of Use: https://treeinspired.com/terms.html
Privacy Policy: https://treeinspired.com/privacy.html