Search articles

Press ESC to close

GetCyber^TM

Hi, I'm Dan Duran!

I share technical research with a global audience to expose risk and drive strategic action.

Home
Services
Speaking & Workshops
Regulated Sectors
About Dan Duran
Posts & Events
Resources NEW!
Engagement Inquiry

Home
Services
Speaking & Workshops
Regulated Sectors
About Dan Duran
Posts & Events
Tools & ResourcesNEW!
Engagement Inquiry

Home
Tools
Interactive Scorecard

Identity & Sensitive Data Exposure Risk Scorecard

Answer the questions below to assess whether identity, access, and sharing may be increasing sensitive data exposure in your environment.

This assessment is anonymous and takes only 5–10 minutes to complete.

1. Is multi-factor authentication enforced for all users, including privileged accounts?

Yes / Fully in placePartially / UnsureNo / Not in place

2. Are administrative roles and privileged accounts formally limited and reviewed regularly?

Yes / Fully in placePartially / UnsureNo / Not in place

3. Is external sharing for SharePoint, OneDrive, or equivalent platforms tightly controlled?

Yes / Fully in placePartially / UnsureNo / Not in place

4. Can users create anonymous or public links to sensitive files?

Yes / Fully in placePartially / UnsureNo / Not in place

5. Do you know who has access to sensitive client, financial, HR, or operational data?

Yes / Fully in placePartially / UnsureNo / Not in place

6. Are service accounts and non-human identities reviewed and restricted?

Yes / Fully in placePartially / UnsureNo / Not in place

7. Are user access rights and inherited permissions reviewed regularly?

Yes / Fully in placePartially / UnsureNo / Not in place

8. Are conditional access or equivalent access controls used to restrict risky sign-ins?

Yes / Fully in placePartially / UnsureNo / Not in place

9. Are AI tools, copilots, or third-party assistants governed to prevent unnecessary data exposure?

Yes / Fully in placePartially / UnsureNo / Not in place

10. Do you have visibility into sensitive data sharing, risky sign-ins, and privileged activity?

Yes / Fully in placePartially / UnsureNo / Not in place

Verification

© 2026 Dan Duran. GetCyber^TM is a trade name of 17848676 Canada Inc. All Rights Reserved. | Privacy Policy