Diagnose your organization's exposure by answering 12 questions across 4 domains