Small Business IT Risk Assessment Form

Business Name Contact Person Email Phone

1. IT Assets

List key IT hardware, software, and data systems

2. Threats & Vulnerabilities

What are the primary IT risks (e.g., malware, data loss, downtime)? Known vulnerabilities in your current systems

3. Current Controls

List controls in place (e.g., firewalls, backups, password policies, antivirus)

4. Risk Likelihood & Impact

Additional Comments or Risks