---
title: "Household cyber risk check in ten questions · Syba"
description: "Ten questions about how your household actually operates: a score out of 100, your three largest gaps and the public source behind every rule. No email needed."
canonical: https://sybainsurance.com/resources
---

# Family cyber exposure score

Ten questions about how your household actually operates. You get a score out of 100, your three largest gaps, and the public source behind every rule. About ninety seconds, and no email required.

-

0 of 10 answered

Question 1 of 10 Worth 14

Does every adult in the household use phone-resistant two-factor on email and banking?

Account takeover starts at email, because every other password reset flows through it. [CISA, Implementing Phishing-Resistant MFA](https://www.cisa.gov/resources-tools/resources/implementing-phishing-resistant-mfa)

Question 2 of 10 Worth 12

If you hold cryptocurrency, where do the keys live?

Self-custody losses are usually final. There is no chargeback and no issuer to call. [FBI IC3, Annual Internet Crime Report](https://www.ic3.gov/AnnualReport/Reports)

Question 3 of 10 Worth 12

Before a large transfer, does someone call a known number to confirm it?

Business email compromise works by changing payment details inside a real email thread. [FBI IC3, Business Email Compromise](https://www.ic3.gov/AnnualReport/Reports)

Question 4 of 10 Worth 10

Do household staff use your personal accounts or devices?

Cover and controls usually stop at the principal. The attack rarely does. [FTC, Protecting Personal Information](https://www.ftc.gov/business-guidance/resources/protecting-personal-information-guide-business)

Question 5 of 10 Worth 10

Could you restore family photos and documents if every device was encrypted tonight?

Ransomware recovery is decided by whether an offline copy exists, not by the ransom. [CISA, StopRansomware Guide](https://www.cisa.gov/stopransomware)

Question 6 of 10 Worth 9

Are credit files frozen for every adult and every child in the household?

A child's unused credit file is the most valuable, and the last one anyone thinks to check. [FTC, Credit Freeze FAQs](https://consumer.ftc.gov/articles/what-know-about-credit-freezes-fraud-alerts)

Question 7 of 10 Worth 9

Are personal devices patched and encrypted, including the ones the children use?

The unpatched tablet shares the network with everything else. [CISA, Secure Our World](https://www.cisa.gov/secure-our-world)

Question 8 of 10 Worth 8

Can your home address, travel pattern or school run be assembled from public posts?

Targeting for extortion and physical risk starts with what is already published. [CISA, Online Privacy and Safety](https://www.cisa.gov/secure-our-world)

Question 9 of 10 Worth 8

Would your family recognise a cloned voice asking for money urgently?

Voice cloning needs seconds of audio, and the ask is always urgent so nobody stops to verify. [FTC, Consumer Alerts](https://consumer.ftc.gov/consumer-alerts)

Question 10 of 10 Worth 8

At 2am on a Sunday, who do you call in the first hour?

The first hour decides the size of the loss, and that is exactly when nobody is reachable. [CISA, Incident Response Resources](https://www.cisa.gov/incident-response)

This is an educational self-assessment. It is not an insurance quote, an underwriting decision, or a security audit, and it cannot see your accounts. It reflects only the answers you give. Coverage, limits and eligibility are set by the policy and the carrier.