1. Does your company offer employees cybersecurity training? Yes No
Yes No
3. Do your employees know what to do during a cyber breach and who to report it to? Yes No
4. Have you changed all the default passwords on your IT devices (routers, switches, servers, Wi-Fi)? Yes No
5. Does your organization have password policies regarding complexity and frequency? Yes No
6. Does your organization have a firewall defending your network from the Internet? Yes No
7. Do your employees take additional security measures when storing sensitive data or intellectual property? Yes No
8. Are your employees’ technology devices locked when not in use? Yes No
9. Does your organization use Two-Factor authentication? Yes No
10. Does your company have Anti-Ware (Virus, Malware, Ransomware, etc.,) installed on all its devices? Yes No
11. Does your organization have a complete inventory of all its IT assets? Yes No
12. Does your organization monitor its IT network for potential cybersecurity attacks? Yes No
13. Are your data backup & restore procedures tested and evaluated at least yearly? Yes No
14. Does your organization have an incident response plan? Yes No
15. Does your organization have 3rd party penetration testing/assessment audits performed? Yes No
16. Do you perform vulnerability scans on your environment? Yes No
17. Does your organization keep up with the latest critical updates on all its IT assets? Yes No
18. Does your company have a Wi-Fi policy for routine password changes? Yes No
19. Do your employees run company software on personal devices such as smartphones, etc.? Yes No
20. Do you allow smart devices to sync to your company’s IT network? Yes No
