Hotel Cybersecurity Self-Assessment

How it works

For each question, choose Yes, Partly or No. At the end you get a score from 0 to 24, a maturity level and the three areas to fix first, all calculated in your browser. Nothing is sent unless you ask for personalised recommendations at the end.

1 Identity and access

Does every login to the PMS, corporate email and admin dashboards require multi-factor authentication (MFA)?

Yes Partly No

No staff share PMS or POS logins: does every person have their own individual access?

Yes Partly No

Is a former employee's access revoked on the day they leave?

Yes Partly No

2 Network and infrastructure

Is guest Wi-Fi segmented and isolated from the network that runs the PMS and payment terminals?

Yes Partly No

Are backups tested regularly, with at least one copy offline or isolated from the main network?

Yes Partly No

Have factory default passwords been changed on electronic locks, TVs and other in-room devices?

Yes Partly No

3 Payments and bookings

Are bookings paid by Pix (Brazil's instant payment system) or arranged over WhatsApp only confirmed once the payment appears on the bank statement, never from a screenshot?

Yes Partly No

Is the hotel's PCI DSS scope (PMS, POS, booking engine, terminals) mapped, with the correct SAQ identified for each channel?

Yes Partly No

Is there a written procedure, requiring more than one person, for approving refunds, penalty-free cancellations or exceptions above a set amount?

Yes Partly No

4 Compliance and incident response

Is there an up-to-date map of which guest personal data is collected and where it is stored (LGPD, Brazil's data protection law)?

Yes Partly No

Is there a documented and tested incident response plan, not just a document on file?

Yes Partly No

Have front desk and reservations staff received security and scam-awareness training in the last year?

Yes Partly No

Your result

0 of 24

Want a written action plan?

Leave your details and our team will review your result and send specific recommendations for your weakest areas.

Hotel Cybersecurity Self-Assessment

1 Identity and access

2 Network and infrastructure

3 Payments and bookings

4 Compliance and incident response

Your result

Want help closing these gaps?