See How Ready Your Digital Business Really Is
The Digital Asset Health Score turns eight tested business controls into one clear result, then shows which weak area is pulling it down.
One score should lead to one better decision
The Digital Asset Health Score measures readiness across the systems a business depends on. It does not reward a long policy nobody has tested. It rewards ownership, monitoring, recovery, and proof.
The eight score areas
Each area receives zero to three points. The total becomes a score out of 100.
| Score area | What earns the strongest result | Useful next page |
|---|---|---|
| Availability | Working monitors and a tested alert | Monitoring tools |
| Backup and recovery | A recent backup and a successful restore | Continuity checklist |
| Access control | Protected accounts and reviewed admin access | Ransomware guide |
| Domain and platform control | Documented ownership, renewal, and recovery access | Website risk |
| Data exposure | A current map of sensitive data and response duties | Data breaches |
| Vendor dependency | Known dependencies with tested fallbacks | System outages |
| Search and AI visibility | Monitoring by priority page, topic, and business dependency | AI visibility risk |
| Incident response and insurance | Tested first actions, contacts, and notice rules | Response plan |
What the score means
| Health score | Meaning | Next move |
|---|---|---|
| 0 to 39 | Exposed | Fix the control that could stop recovery or hide an incident. |
| 40 to 69 | Unstable | Turn documented controls into tested controls. |
| 70 to 84 | Protected but not proven | Close the weakest area and test the handoff. |
| 85 to 100 | Resilient | Keep the evidence current and watch for new dependencies. |
Worked example: a business that has tools but has not tested recovery
| Score area | Current points | Target points | What changes |
|---|---|---|---|
| Availability | 3 | 3 | Keep the tested alert. |
| Backup and recovery | 1 | 3 | Complete a real restore test. |
| Access control | 2 | 3 | Remove old admin access. |
| Domain and platform control | 3 | 3 | Keep renewal and recovery records current. |
| Data exposure | 1 | 2 | Map sensitive data and retention. |
| Vendor dependency | 2 | 2 | Test the most important fallback. |
| Search and AI visibility | 2 | 2 | Track priority-page dependency. |
| Incident response and insurance | 1 | 3 | Run the first-hour response drill. |
| Total health score | 63 | 88 | Move from unstable to resilient. |
The useful part is not the final number. It is seeing that three tested actions can change the business from hoping it can recover to proving it can.
Availability
Know when a revenue or customer system fails. A tool earns credit only when the alert reaches the right person.
Backup and recovery
A backup becomes protection after a successful restore. Record how long the restore took and what the business had to do while it waited.
Access control
Protect admin accounts, remove old access, and know who can change the system now.
Domain and platform control
Keep ownership, renewal, recovery access, and vendor contacts where the business can reach them during an incident.
Data exposure
Know which systems hold sensitive data, who can reach it, and what notice or recovery duty begins after exposure.
Vendor dependency
Identify the outside service that would stop the most work. Test a fallback before that vendor becomes the incident.
Search and AI visibility
Track the pages and topics that create discovery. A business should know when one source carries too much of the lead flow.
Incident response and insurance
Document the first call, first action, evidence owner, approved vendors, and insurance notice rule. Then test the handoff.
Exposed
Start with the control that affects recovery. Unknown ownership, missing backups, or no incident contact can turn a manageable problem into a business interruption.
Unstable
The business has pieces of protection, but too much still depends on an assumption. Test the restore, alert, or response handoff.
Protected but not proven
Most controls exist. Close the weakest area and collect the evidence that proves it works.
Resilient
The business can detect, respond, and recover with tested controls. Review the score when the vendor stack, revenue dependency, team, or threat changes.
Get your score
Use the digital risk assessment to answer the eight questions now. Use the Risk Score method when you need to rank one threat or forecast how a planned control changes it.