Cyber Security Assessment

Complete this security assessment so our team can understand your current defenses and recommend the right protection strategy for your systems.

Contact Name

Contact Email

Organization

Phone

Security Review Questions

1. Are regular vulnerability assessments and penetration tests conducted on the company's systems and applications?

2. Are security patches and updates applied promptly across all systems and applications?

3. Does the company have strong network and system monitoring tools?

5. Does your company have a process in place for monitoring and analyzing security logs and alerts for suspicious activity?

7. Has data classification been done by the company?

8. Does your company have data loss prevention in place to avoid unwanted data disclosure?

9. Are there documented procedures to respond and remediate identified vulnerabilities in a timely manner?

10. Are data encryption and other data protection measures implemented to safeguard sensitive information?

11. Are regular backups of critical data taking place?

12. Are those backups tested to ensure their integrity and availability in the event of a security incident?

13. Are services and devices hardened to ensure security?

14. Does your company have proper identity management in place?

15. Does your company have remote users?

16. Does your company have secure remote access set up for its employees or users? (such as VPN)

17. Does your company have cloud security controls in place?

18. Does your company have physical security controls for on-premise data centers?

19. Does your company have end user protection mechanisms? (such as EDR, Anti Malware, etc.)

20. Does your company have privilege access management in place?

21. Are regulatory assessments conducted in a timely manner by your company?

22. Does your company conduct regular Cyber Security training and awareness programs for its employees?

23. Does your company have a well documented and up-to-date inventory of its hardware, software, and network infrastructure?

24. Does your company have a proper JML (Joiners, Movers, and Leavers) HR process?

25. Does your company perform periodic audits, access reviews, etc.?

26. Does your company have trained staff for security function (Security Policy & Security Objective)?

27. Does your company have a risk register with a list of already identified risks?

4. If so, would you mind telling us what they are?

6. If so, would you mind giving us a general understanding of that process in place?

Additional notes or comments