Quick Assessment

Facebook

This field is for validation purposes and should be left unchanged.

1. Asset Management

a) We actively manage (inventory, track and report) all computing and networking assets, whether on-premise or in the cloud:

Yes

No/Not Sure

Somewhat

Don't know what it means

b) We keep our network and information flow diagrams up to date:

Yes

No/Not Sure

Somewhat

Don't know what it means

c) We keep our network and information flow diagrams up to date:

Yes

No/Not Sure

Somewhat

Don't know what it means

2. Data Protection Management

a) We have formal processes and technical controls in place to identify, classify, securely handle, retain, and dispose sensitive data:

Yes

No/Not Sure

Somewhat

Don't know what it means

b) We maintain a formal data classification scheme:

Yes

No/Not Sure

Somewhat

Don't know what it means

c) We have enabled encryption for sensitive data at rest and in transit:

Yes

No/Not Sure

Somewhat

Don't know what it means

3. Configuration Hardening

a) We implement hardware and software in accordance with manufacturer best practices:

Yes

No/Not Sure

Somewhat

Don't know what it means

b) We apply regular hardware firmware upgrades:

Yes

No/Not Sure

Somewhat

Don't know what it means

c) We actively manage our firewall and related network security policies and controls:

Yes

No/Not Sure

Somewhat

Don't know what it means

d) We enforce automatic lockout of accounts upon breach of failed authentication attempts:

Yes

No/Not Sure

Somewhat

Don't know what it means

e) We have remote wipe capability of mobile devices:

Yes

No/Not Sure

Somewhat

Don't know what it means

f) We perform traffic filtering between networks (network segmentation) :

Yes

No/Not Sure

Somewhat

Don't know what it means

4. Identity Management

a) We actively manage (inventory, track and report) all identities and accounts:

Yes

No/Not Sure

Somewhat

Don't know what it means

b) We have a formal process and defined responsibilities to manage identities and accounts related to new joiners, movers, and leavers:

Yes

No/Not Sure

Somewhat

Don't know what it means

c) We have a strong password policy for all business-critical information systems:

Yes

No/Not Sure

Somewhat

Don't know what it means

5. Access Management

a) We have established a formal process for granting and revoking access to systems and sensitive data:

Yes

No/Not Sure

Somewhat

Don't know what it means

b) We have enforced multi-factor authentication to all business-critical information systems and public facing services:

Yes

No/Not Sure

Somewhat

Don't know what it means

c) We centralise access control to business-critical information systems using directory service or SSO provider:

Yes

No/Not Sure

Somewhat

Don't know what it means

d) We manage access controls for remote connections to our network:

Yes

No/Not Sure

Somewhat

Don't know what it means

6. Vulnerability Management

a) We have automated the application of regular software and application updates and security patches:

Yes

No/Not Sure

Somewhat

Don't know what it means

b) We perform regular vulnerability scans and penetration testing on our internal and external assets:

Yes

No/Not Sure

Somewhat

Don't know what it means

c) We manage formal remediation plans to mitigate known threats and risks:

Yes

No/Not Sure

Somewhat

Don't know what it means

7. Audit Logs Management

a) We collect, review, and retain system and security logs on a regular basis:

Yes

No/Not Sure

Somewhat

Don't know what it means

8. Email, Web and Malware Protection

a) We are enforcing the blocking of unwanted and unnecessary websites, web-applications, and file types:

Yes

No/Not Sure

Somewhat

Don't know what it means

b) We are running an email spam, malware, URL, and impersonation protection service:

Yes

No/Not Sure

Somewhat

Don't know what it means

c) We have implemented a managed global domain protection (DMARC) service:

Yes

No/Not Sure

Somewhat

Don't know what it means

d) We use a centrally managed workstation and server anti-virus/malware solution:

Yes

No/Not Sure

Somewhat

Don't know what it means

e) We actively monitor, alert and remediate any known or potential threats:

Yes

No/Not Sure

Somewhat

Don't know what it means

9. Security Awareness and Skills Training

a) We have implemented and organisation-wide security awareness training program:

Yes

No/Not Sure

Somewhat

Don't know what it means

10. Service Provider Management

a) Our Service Agreements with Service Providers includes a comprehensive set of security compliance requirements:

Yes

No/Not Sure

Somewhat

Don't know what it means

Results:

This field is hidden when viewing the form

Quick Assessment Results:

0 > 10

When it comes to cyber and information security, there is no silver bullet. Your organisation lacks most of the critical controls and safeguards to adequately protect its information assets against modern-day security threats.

10 > 20

When it comes to cyber and information security, there is no silver bullet. Your organisation still lacks many of the critical controls and safeguards to adequately protect its information assets against modern-day security threats.

20 > 25

Keep going! You have implemented many of the important controls and safeguards. There are however still some critical controls that need to be implemented to adequately protect information assets against modern-day security threats.

25 > 30

Almost there! You have implemented most of the important controls and safeguards. There are however still a few critical controls that need to be implemented to adequately protect information assets against modern-day security threats.

Contact Information

To learn more about how we can assist your company in improving its ability to recover from disasters, please leave your details below and we will contact you.

Name:(Required)

Surname:(Required)

Designation:(Required)

Business Email Address:(Required)

Contact Number:(Required)

Take Our
Assessment Survey

1. Asset Management

2. Data Protection Management

3. Configuration Hardening

4. Identity Management

5. Access Management

6. Vulnerability Management

7. Audit Logs Management

8. Email, Web and Malware Protection

9. Security Awareness and Skills Training

10. Service Provider Management

Results:

0 > 10

10 > 20

20 > 25

25 > 30

Contact Information

/--

Sign up for our newsletter

IT Support & Management

Professional Services

Business Add-ons

About

Managed IT Services

Services

Business Add-ons

About

Find us on Social