How Secure Is Your Organization?

CYBERSECURITY RISK

SELF-ASSESSMENT

How Secure Is Your Organization?

Answer the following questions to get a quick evaluation of your current security posture and identify potential areas of vulnerability.

Self-Assessment

How secure is your organization?

Answer the following questions to get a quick evaluation of your current security posture and identify potential areas of vulnerability.

Infrastructure Security

Access Controls

Data Protection

Detection & Response

Security Culture

Governance & Compliance

Scoring Your Assessment

We maintain an up-to-date inventory of all devices and software on our network

Our wireless networks use WPA2/WPA3 with strong authentication

All systems and applications are patched within 30 days of update releases

We use network segmentation to separate critical systems from general access

We have a formalized process for secure configuration management

We enforce multi-factor authentication for all remote access and privileged accounts

We follow the principle of least privilege for all user accounts

We have a documented process for onboarding and offboarding users

Privileged accounts are regularly audited and reviewed

We use password managers and enforce strong password policiesormalized process for secure configuration management

Sensitive data is encrypted both in transit and at rest

We have data classification policies and procedures

We have implemented data loss prevention tools and processes

Regular data backups are performed and tested for recoverability

We have a formal process for secure data disposal

We have 24/7 monitoring and alerting for security events

We have a documented incident response plan that is tested regularly

Our staff knows how to identify and report potential security incidents

We conduct regular security log reviews

We perform regular vulnerability scanning of our environment

All employees receive regular security awareness training

We conduct simulated phishing exercises to test employee awareness

Security responsibilities are clearly defined across the organization

We have an anonymous reporting mechanism for security concerns

Our leadership team actively supports security initiatives

Infrastructure Security

Scoring Your Scorecard

Governance & Compliance

Security Culture

Detection & Response

Data Protection

Access Controls

Infrastructure Security

We have a documented security policy framework

We conduct regular risk assessments

We have identified our regulatory compliance requirements

Third-party vendors undergo security assessments before engagement

We have cybersecurity insurance coverage

0-10 checked items: Your organization may be at high risk. Consider prioritizing fundamental security controls and seeking professional assistance immediately.

11-20 checked items: Your security posture has some strengths, but significant gaps remain. Focus on addressing the unchecked items in a prioritized manner.

21-25 checked items: Your organization has a good security foundation. Work on refining and maturing your security program.

26-30 checked items: Your organization demonstrates a high level of security maturity. Continue to enhance and optimize your security program.

Ready to address your security gaps? Contact our team for a no-obligation consultation to discuss your results.