Would the business survive the call nobody wants?
Six questions reveal whether the organization can detect, contain, communicate, and recover when an incident happens outside business hours.
01 / The 3AM Test
A business passes the 3AM Test when monitoring, recovery, escalation, maintenance evidence, security basics, and active threat detection all work together after hours—not merely when those services appear in a contract.
The six questions
01 Is anyone monitoring your systems 24/7?
02 Can you recover from ransomware?
03 Who gets called when something breaks?
04 When did someone last check your systems?
05 Are the security basics in place?
06 Is anyone watching for active threats?
Open the interactive assessment
The score is shown immediately. Nothing is submitted or stored.