The Cybersecurity Risk Assessor

Assess our cybersecurity risk at a business level (not deep technical).

The business: [DESCRIBE — WHAT DATA WE HOLD, HOW WE OPERATE]
Current security posture: [DESCRIBE OR "MINIMAL / UNSURE"]

Provide:
1. The main threats to a business like ours (phishing, ransomware, data
   breach, insider, third-party)
2. Where we're most likely exposed
3. The high-impact, achievable protections (the basics that stop most
   attacks)
4. The business consequences of a breach (financial, legal, reputational)
5. What to prioritise given limited budget

Focus on business risk and the achievable basics that block the majority
of attacks. Flag that a real security assessment needs a qualified
professional.