Cyber Security Checklist and Rating

Cyber Security Checklist and Rating

Use this form to estimate the level of cyber security risk your organization faces

Company Name*

First Name*

Last Name*

Email Address*

Does your organization have a written Cyber Security Policy?*

Select 0 for No, 5 for Possibly, or 10 for Yes

Select

Does your policy cover guidelines for use of company email?*

Select 0 for No, 5 for Possibly, or 10 for Yes, Policy Covers this topic

Select

Does your policy require the use of 2 factor authentication on all business email accounts?*

Select 0 for No, 5 for Possibly, or 10 for Yes, Policy Covers this topic

Select

Does your policy require email sent with sensitive information be sent via only secure means?*

Select 0 for No, 5 for Possibly, or 10 for Yes, Policy Covers this topic

Select

Does your policy require collecting email logs for purposes of eDiscovery?*

Select 0 for No, 5 for Possibly, or 10 for Yes, Policy Covers this topic

Select

Does your business email have technology in place to detect and contain email that contains malware, and/or resembles phishing or spam?*

Select 0 for No, 5 for Possibly, or 10 for Yes

Select

Do you have guidelines in place on where and/or what application employees are required to use when storing documents?*

Select 0 for No, 5 for Possibly, or 10 for Yes

Select

Are all locations encrypted where organization documents are stored? Example, hard drives of laptops or cloud storage.*

Select 0 for No, 5 for Possibly, or 10 for Yes

Select

When sharing documents with clients or other parties, are they shared in a secure manner? To clarify this applies to documents not shared through email but through some other means.*

Select 0 for No, 5 for Possibly, or 10 for Yes

Select

Is organization data backed up off premise?*

Select 0 for No, 5 for Possibly, or 10 for Yes

Select

Do you have provisions to sanitize any personal or business devices no longer used to conduct organization business?*

Select 0 for No, 5 for Possibly, or 10 for Yes

Select

Does your organization require passwords (strong) to access devices or applications that contain organization data and does each employee have a unique username and password combination for each of these systems?*

Select 0 for No, 5 for Possibly, or 10 for Yes

Select

Does your organization employ 2 factor authentication for ALL applications or devices that support it?*

Select 0 for No, 5 for Possibly, or 10 for Yes

Select

Has your organization decided whether to allow the use of personal mobile or personal computers to conduct organization business or access organization applications? To clarify the question is whether your organization has specified if employees can use personal devices period.*

Select 0 for No, 5 for Possibly, or 10 for Yes

Select

Does your organization mandate all mobile devices used to conduct organization business (phones, tablets, laptops) to be encrypted and/or have access to them secured by passcode?*

Select 0 for No, 5 for Possibly, or 10 for Yes

Select

Does your organization mandate that any possible loss/compromise of a device be reported to management and documented and dealt with accordingly?*

Select 0 for No, 5 for Possibly, or 10 for Yes

Select

Does your organization use software on computers and devices to detect, contain and remove malware?*

Select 0 for No, 5 for Possibly, or 10 for Yes

Select

Do you have in place the ability to monitor and log access (authorized or not) to your organization's digital assets?*

Select 0 for No, 5 for Possibly, or 10 for Yes

Select

Is your office WiFi/network secured from unauthorized access?*

Select 0 for No, 5 for Possibly, or 10 for Yes

Select

Do you have effective technology solutions in place that allow your staff to easily comply with your policies and guidelines without angst?*

Select 0 for No, 5 for Possibly, or 10 for Yes

Select

Do you have provisions to sanction employees or partners for violating policy?*

Select 0 for No, 5 for Possibly, or 10 for Yes

Select

Have all partners and employees who work in your organization been trained on the items listed here?*

Select 0 for No, 5 for Possibly, or 10 for Yes

Select

Do you contractually require vendors or contractors who provide products or services to your organization have equal or better information security practices than your organization?*

Select 0 for No, 5 for Possibly, or 10 for Yes

Select

Does your malpractice or professional liability insurance cover cases of data breach or loss?*

Select 0 for No, 5 for Possibly, or 10 for Yes

Select

Do you feel confident that your organization is taking all reasonable measures available to protect the organization' digital assets with respect to your ethical and regulatory requirements to do so?*

Select 0 for No, 5 for Possibly, or 10 for Yes

Select

This form is for informational purposes only and does not eliminate the need for, or the value of professional cyber security assessment and services. The user assumes all risks of use. Do not rely on the results of the form alone to assess your specific risk profile. For more information or questions about the form, contact our Personal Knowledge Advisors at pka@skyline-ats.com

Send me a copy of my responses

Privacy Notice|Report Abuse