Staff receive invoices, spreadsheets, job documents or supplier files by email.
Staff receive invoices, spreadsheets, job documents or supplier files by email.
Small business cyber safety
Risky Office Attachment Checker
Could a document or spreadsheet trick your staff?
Check whether risky Office files, invoices, spreadsheets, supplier documents or attachments could put your business at risk. Based on public ASD/ACSC Essential Eight guidance.
Risky Office filesInvoice safetyStaff awarenessPractical self-check
When to use this check
Use this when you want a practical business-owner answer, not a technical framework first.
People sometimes enable content, macros or editing because a file asks them to.
People sometimes enable content, macros or editing because a file asks them to.
You want simple rules for handling suspicious Word, Excel or PDF attachments.
You want simple rules for handling suspicious Word, Excel or PDF attachments.
Privacy: this checker runs in your browser and does not ask for sensitive details.
Answer the quick questions
Tick the statements that are true or risky for your business.
How this relates to the Essential Eight
This check relates to risky Office files. In Essential Eight language, it supports Microsoft Office macro controls and safer application use.
Helps improve Essential Eight alignment step by step. This is a practical self-check, not a formal government certification or audit.
What this means for a small business
A single risky invoice, spreadsheet or supplier document can lead to stolen logins, fake payments, device compromise or lost work time.
What to fix first
- Teach staff not to enable content or macros from unexpected files.
- Create a simple suspicious file rule for invoices and supplier documents.
- Review Microsoft Office, email and file download settings.
Why it matters
These basic checks help protect business operations and reduce avoidable cyber risk.
When to get local help
Your IT & Tech Mates can help review Microsoft 365, Office settings, email safety and staff-friendly file handling rules.
Related tools
Use the hub and related tools to check the other parts of your small business cyber safety setup.
Cyber Safety Hub
Return to the hub and choose your business concern.
Small Business Cyber Safety Self Check
Start with the full five-minute check across logins, backups, updates, access and device safety.
Email & Login Safety Checker
Check two-step login and account access for email, cloud, accounting, website and social platforms.
Backup Safety Checker
Check whether files, invoices, records and job photos can be recovered if something goes wrong.
Staff Access Risk Checker
Review old accounts, admin access, shared passwords and contractor access.
Out-of-Date Computer Risk Checker
Check whether computers, browsers, Office, accounting apps, POS systems and remote access tools are being kept up to date.
Risky Office Attachment Checker
Check whether risky Office files, invoices, spreadsheets, supplier documents or attachments could put your business at risk.
Safer Browser & App Settings Checker
Check browser updates, extensions, downloads, password saving, PDF readers, remote access apps and common unsafe app settings.
Cyber Insurance & Tender Evidence Helper
Prepare a plain-English evidence checklist for insurers, suppliers, clients or tenders.
Small Business Cyber Action Plan Builder
Turn your answers into a simple action plan: first 3 fixes, this week, this month and later.
Need help turning this into real protection?
Your IT & Tech Mates can help set up two-step login, backups, updates, admin access, safer devices, and a plain-English cyber action plan for your business.
FAQ
Are all macros bad?
No, but unexpected files asking staff to enable content or macros are risky. Treat them carefully.
What should staff do with a suspicious invoice?
Do not reply to the same email thread. Verify using a known phone number or known contact method.
Is this a formal audit?
No. This is a practical self-check based on public ASD/ACSC Essential Eight guidance, not a formal government certification or audit.