How exposed is your firm, really?

Twenty-two plain questions about how your organisation actually works. No jargon, no technical knowledge needed, nothing to install. At the end you get a score, a list of what to fix, and which of it maps to the standards your clients and regulators care about.