← Back to interactive assessment

ESET

MSP Security Stack Health Assessment

21 questions · Tick one answer per question and add up the points.

Section 1: Vendor consolidation

  1. 1. How many security vendors do you actively manage?

    Fewer than 5 (0 pts)5–10 (1 pt)More than 10 (2 pts)

  2. 2. How many security management consoles do you use daily?

    1–3 (0 pts)4–6 (1 pt)More than 6 (2 pts)

  3. 3. Do multiple products provide overlapping functionality?

    Rarely (0 pts)Sometimes (1 pt)Frequently (2 pts)
Section score/ 6

Section 2: Alert fatigue and monitoring

  1. 1. How often do technicians manually correlate alerts across tools?

    Rarely (0 pts)Weekly (1 pt)Daily (2 pts)

  2. 2. What share of alerts turn out to be false positives or noise?

    Small share (0 pts)About half (1 pt)Most of them (2 pts)

  3. 3. Do alerts ever go unreviewed because of volume?

    Never (0 pts)Occasionally (1 pt)Regularly (2 pts)
Section score/ 6

Section 3: Operational efficiency

  1. 1. How much time is spent logging into multiple security tools?

    Minimal (0 pts)Moderate (1 pt)Significant (2 pts)

  2. 2. How many systems do you review before responding to an incident?

    1–2 (0 pts)3–5 (1 pt)More than 5 (2 pts)

  3. 3. How much of your security operations work is repetitive and manual?

    Little (0 pts)Some (1 pt)Most (2 pts)
Section score/ 6

Section 4: Visibility and integration

  1. 1. Do you have single-pane-of-glass visibility?

    Yes (0 pts)Partially (1 pt)No (2 pts)

  2. 2. Can you trace an attack across endpoint, network, email, and cloud layers?

    Yes (0 pts)Sometimes (1 pt)No (2 pts)

  3. 3. Do you have known integration gaps between tools?

    No (0 pts)Unsure (1 pt)Yes (2 pts)
Section score/ 6

Section 5: Client scalability and staff training

  1. 1. How standardized is your security stack across clients?

    Mostly standardized (0 pts)Mixed (1 pt)Highly customized (2 pts)

  2. 2. How easy is it to onboard a new client's security?

    Very easy (0 pts)Moderate (1 pt)Time-consuming (2 pts)

  3. 3. How hard is it to train new technicians on your tools?

    Simple (0 pts)Moderate (1 pt)Difficult (2 pts)
Section score/ 6

Section 6: AI readiness and automation

  1. 1. Is telemetry shared across your security tools?

    Fully integrated (0 pts)Partially integrated (1 pt)Siloed (2 pts)

  2. 2. Do you have visibility into shadow AI use in client environments?

    Yes (0 pts)Limited (1 pt)None (2 pts)

  3. 3. How automated are investigation and response?

    Extensive (0 pts)Some (1 pt)Mostly manual (2 pts)
Section score/ 6

Section 7: Reporting and compliance visibility

  1. 1. How are client-facing security reports produced?

    Automated (0 pts)Partly manual (1 pt)Fully manual (2 pts)

  2. 2. How long does it take to gather compliance or audit evidence for a client?

    Hours (0 pts)Days (1 pt)Weeks (2 pts)

  3. 3. Can you report security posture across all clients from one place?

    Yes (0 pts)Partially (1 pt)No (2 pts)
Section score/ 6

Scoring key

Add all section scores for your total (max 42). Risk % = total ÷ 42 × 100.

TotalRisk %
Risk %Section scoreTierWhat it means
0–33%0–2Low riskStreamlined environment with strong visibility and manageable operations.
34–66%3Moderate riskSome inefficiencies and management challenges exist.
67–100%4–6High riskSignificant vendor sprawl, operational burden, and increased security risk.

Take the interactive version at the assessment website for personalized recommendations.