BuildingFloorsPlanEvidenceFrameworks
Harbour & Finch Accountants Ltd
Email & governance0 of 6 failingIdentity5 of 13 failingDevices4 of 6 failingData1 of 1 failing

Demo tenant · surveyed 6 Nov 2026 · 34 checks

Harbour & Finch Accountants Ltd

42High
exposure
20after 5.5 working hours

Shut this door first

Every user has registered MFA methods

−8.8 exposure · 2h

See the steps

Floors

6 routes in

An administrator's account is phished or password-sprayed. With admin rights the attacker can read every mailbox, delete backups and lock the business out of its own systems.

Compromise any account62% likely
IDN-010 · FailingIDN-002 · Failing
Reach a privileged role92% likely
IDN-008 · FailingIDN-009 · FailingGOV-001 · Partial

Close every door on one stage and the whole route fails. The solid line takes the most exposed door at each stage.

Closed since the last survey · 10

  • MFA enforced for every user
  • Legacy authentication is blocked
  • Users cannot consent to third-party apps
  • Device code sign-in is blocked
  • No third-party app holds high-risk delegated permissions without review
  • Compliance policy requires a firewall
  • DMARC policy set to quarantine or reject
  • DKIM signing enabled
  • No inbox rules forward mail outside the organisation
  • No inbox rules hide or delete incoming mail

New or worse · 0

No regressions.

Email & governance0 of 6 failing
Identity5 of 13 failing
Devices4 of 6 failing
Data1 of 1 failing
25%Cyber EssentialsNot ready: 7 requirements failing19%ISO/IEC 27001:20224 of 26 controls met
Printable reportDownload evidence pack