If your main server or file storage died right now, how confident are you that you'd recover everything?
We test our backups regularly — I know we'd recover
We have backups, but we've never tested a restore
I'm honestly not sure what we'd lose
Where do your backups live?
Both on-site and off-site/cloud — automatic
One copy — either on-site only or cloud only
An external drive someone occasionally plugs in — or I don't know
How long could your firm function with no access to project files?
We have a recovery plan with a target time — and we've practiced it
A day or two would hurt, but we'd survive
Even a few hours would put deadlines at risk — and we have no plan
Is multi-factor authentication (MFA) turned on for email and remote access?
Everywhere — enforced for everyone
On some accounts, or it's optional
No — or I'm not sure
If a computer on your network were compromised today, would anything alert you?
Yes — monitored endpoint protection (EDR) is watching
We have standard antivirus, but nobody monitors it
Nothing is watching — or I'm not sure
How does your team handle passwords?
Password manager with unique passwords for everyone
Mixed — some shared or reused passwords
Shared spreadsheets, sticky notes, or browser-saved
When you filled out your last cyber insurance application, how accurate were the answers?
We verified each control before answering
Best guesses — mostly right, probably
We checked yes to get it done — or we don't have a cyber policy
If a GC or client sent you a security questionnaire today, could you answer it with proof?
Yes — documentation is ready to go
We could scramble and pull something together
Honestly, we'd freeze
Does your team get any security awareness training?
Regular training plus phishing simulations
Once in a while, informally
Never
How do project files get from the field to the office?
They sync automatically — same files everywhere
Email, texted photos, or manual uploads
They ride back in someone's truck
Two people open the same Revit or CAD file. What happens?
Proper file locking or worksharing — no lost work
Occasional version conflicts we work around
We've lost hours to overwritten files more than once
Can your team securely access firm files from home or a job site?
Yes — secure access that just works
Workarounds — personal Dropbox or emailing files
No real remote access
How old are most of your workstations?
Under ~4 years — we have a replacement plan
Mixed bag — we replace when something dies
Most are 5+ years old, and there's no plan
How predictable is your IT spending?
Planned and budgeted yearly
Lumpy — surprises when things break
Pure reaction — no budget at all
Who handles IT for your firm today?
A dedicated provider who knows AEC software
A generalist provider or break-fix shop
The accidental IT person in the office — or nobody
First Name
*
Last Name
*
Email
*
Organization
*
Phone
*