Small Business Security Self‑Assessment

Name

First NameLast Name

Company

Email

example@example.com

Phone Number

Area CodePhone Number

Address

Street Address

Street Address Line 2

CityState / Province

Postal / Zip Code

1. Does your business have a written security or safety plan?

2. Is there a designated security or risk lead within your management team?

3. Has the security plan been reviewed or updated in the past 12 months?

4. Are staff trained to recognize suspicious or unusual behavior in customers, vendors, and coworkers?

5. Do employees know exactly what to do during violent, medical, or disruptive incidents?

6. Are background checks completed for employees in sensitive roles (finance, IT, inventory, operations)?

7. Are there policies or audits in place to detect or prevent internal theft, fraud, or misconduct?

8. Does management periodically verify that staff follow security protocols consistently?

9. Are entrances monitored or access-controlled (doors, gates, reception)?

10. Are sensitive areas (cash registers, server rooms, inventory) restricted and secured?

11. Are visitor and vendor policies clearly defined and enforced?

12. Can staff alert management or security discreetly during an incident?

13. Is there a reliable way to contact first responders or internal IT/security?

14. Has your business conducted emergency drills, tabletop exercises, or scenario planning?

15. Are cameras, alarms, or monitoring systems actively managed and regularly reviewed for gaps or suspicious activity?

Total

0–10 → Low vulnerability. Your business is generally prepared, but even strong programs can hide blind spots, especially around staff integrity.

11–20 → Moderate vulnerability. Gaps exist that could lead to operational, financial, or reputational harm if unaddressed. Staff behavior and adherence to protocols may be a weak point.

21–30 → High vulnerability. Immediate assessment and mitigation are strongly recommended. Internal oversight and staff integrity may be creating unseen risks.

Small Business Safety Self Scoring Assessment

Management and Policy

Staff and Operational Awareness

Physical and Digital Access

Incident Response and Reporting

Security Systems and Oversight

Scoring Interpretation