The Audit-Ready Information Security Quiz

"It is safe to plug in a USB drive you found in the car park to check who it belongs to." True or false? Anyone who hesitates on that one is exactly who this assessment exists for. The Information Security Awareness template is a pass or fail compliance check built around the everyday habits that cause real breaches: found USB sticks, unattended screens, over-generous access rights, and confidential files sent through the wrong channel.

Eight questions across four policy areas

The quiz holds 8 questions spanning data classification, access control, removable media handling, and the clean desk policy. Formats vary: single choice items like "What does the principle of 'least privilege' mean in access control?", select-all lists on removable media best practice, and true or false statements on tailgating and found USB drives. Every item is worth 12.5 points toward a 100-point total, and the pass mark sits at 80, so there is little room for lucky guessing.

Each answer carries a written explanation. Miss the least privilege question and the quiz explains that access should follow job role, not seniority, and applies to temporary staff too. Those explanations turn a scored test into a short lesson, which matters when the goal is changed behaviour rather than a grade in a spreadsheet.

Who runs this certification

The template describes itself as required certification for all employees handling sensitive data, and that is how most teams deploy it. IT security leads schedule it as an annual refresher, HR folds it into onboarding before new starters get system access, and compliance officers run it ahead of audits to document that awareness training actually happened. At an estimated 10 to 15 minutes, it fits into a normal workday without anyone rearranging meetings.

Bend it to your own security policy

Nothing in the quiz is locked. Rewrite questions, rename the classification levels to match your internal scheme, point the account-compromise item at your real IT security contact, or raise the pass threshold above 80. The defaults are sensible: takers can skip a question and come back, step backwards to review earlier answers, and watch a progress indicator fill as they go. Retakes come switched on, so a failed attempt becomes a prompt to study rather than a dead end.

Distribution is flexible too. Send a direct link, print a QR code for the break room noticeboard, paste the embed snippet into your intranet, or publish it on a WordPress page through Uplup's plugin shortcode. Results collect in a dashboard with accuracy shown question by question, and a CSV export gives you the certification records auditors ask to see. The whole thing runs on Uplup's free plan, so certifying an entire company costs nothing.