Readiness assessment for data protection