Page 1 of 8
Nectar Readiness Scorecard
Twenty questions. Five minutes. You'll get a score out of 100 and a tailored next step.
Domain 1 — Access & Identity
Q1. Is multi-factor authentication (MFA) turned on for all your email accounts (Microsoft 365 or Google Workspace)?
*
A
Yes, enforced for every active mailbox including admins
B
Yes for most, but a few exceptions or shared mailboxes
C
Only for some users, or only optional
D
No, or I'm not sure
Q2. When someone leaves the business, how quickly is their access actually removed?
*
A
Same day, every time, against a checklist
B
Usually within a week
C
Eventually, but no formal process
D
Honestly, I'm not sure we always do
Q3. Do any team members share logins to business systems?
*
A
No — every person has their own account
B
One or two shared accounts (e.g. a generic admin login)
C
Yes, sharing is common in our team
D
Not sure
Q4. Are admin/owner-level accounts (the powerful ones) separate from day-to-day user accounts?
*
A
Yes, admin accounts are separate and only used when needed
B
Some are, some aren't
C
No, the same accounts do both
D
Not sure
Q5. Do you use a password manager across the business?
*
A
Yes, everyone uses one
B
Some of us do
C
No — passwords are in heads, notes, or spreadsheets
D
Not sure
Next