GHB DentalTOOLS & INSIGHTS
Tools / Cybersecurity gap score
FOR PRACTICES · FREE TOOL

Dental Cybersecurity Risk Score

Answer ten questions about your practice safeguards. Get a self-reported gap score and a practical action list.

Your inputs stay on this device.

Review your safeguards

Choose what you can verify. “Not sure” is a useful answer.

0 of 10 answered

1. Do you have a current risk analysis and tracked remediation?

A documented assessment covers your current systems; unresolved items are tracked.

Safeguard screening
2. Are unique accounts and multifactor authentication in place?

Check supported email, remote access, and privileged systems.

Recommended safeguard
3. Have protected backups been successfully restored in a test?

Look for documented recovery testing, not just backup completion emails.

Recovery safeguard
4. Are systems supported and updates tracked?

Include updates, unsupported devices, and documented exceptions.

Recommended safeguard
5. Are endpoint and email protections configured and monitored?

Cover in-scope practice devices and email accounts.

Recommended safeguard
6. Is access limited and promptly removed on departure?

Check least privilege and a defined offboarding process.

Access safeguard
7. Is workforce security awareness organized?

Include training and ongoing reminders for relevant staff.

Training safeguard
8. Is there an incident owner, reporting channel, and response plan?

Staff know whom to contact if something looks wrong.

Response safeguard
9. Is relevant vendor access and oversight reviewed?

Review vendor access and applicable agreements.

Vendor safeguard
10. Are device and data protections evaluated?

Consider appropriate encryption, screen locking, and disposal.

Device safeguard

Your next step starts here.

Enter your inputs and calculate to see a complete, free result.

How to read your result

Each safeguard carries an internal weight. Implemented has zero gap, partial has half gap, and absent or unknown has full gap. Higher scores indicate more reported or unresolved gaps. Unknown answers produce verification tasks. The bands are product heuristics, not breach probabilities or an official compliance scale.

Common questions

Is this a HIPAA risk analysis?

No. A complete risk analysis examines risks to all relevant electronic protected health information; this short checklist only helps prioritize follow-up.

What if I do not know?

Choose unknown. Your results separate evidence completeness from the gap score and suggest what to verify.

Does a low score prove security?

No. Scores are based on your answers, not technical testing.

Methodology & sources

Calculation and content version 1.0.0. Sources checked 2026-10-05. Input assumptions are shown in your result; estimates and checklists have the limits described above.

Read our shared methodology