WHY GET
CHECKED?

1. Does your company offer employees cybersecurity training?
YesNo

2. Do your employees know how to recognize a cybersecurity incident or event (phishing, spam, links, etc.)?
YesNo

3. Do your employees know what to do during a cyber breach and who to report it to?
YesNo

4. Have you changed all the default passwords on your IT devices (routers, switches, servers, Wi-Fi)?
YesNo

5. Does your organization have password policies regarding complexity and frequency?
YesNo

6. Does your organization have a firewall defending your network from the Internet?
YesNo

7. Do your employees take additional security measures when storing sensitive data or intellectual property?
YesNo

8. Are your employees’ technology devices locked when not in use?
YesNo

9. Does your organization use Two-Factor authentication?
YesNo

10. Does your company have Anti-Ware (Virus, Malware, Ransomware, etc.,) installed on all its devices?
YesNo

11. Does your organization have a complete inventory of all its IT assets?
YesNo

12. Does your organization monitor its IT network for potential cybersecurity attacks?
YesNo

13. Are your data backup & restore procedures tested and evaluated at least yearly?
YesNo

14. Does your organization have an incident response plan?
YesNo

15. Does your organization have 3rd party penetration testing/assessment audits performed?
YesNo

16. Do you perform vulnerability scans on your environment?
YesNo

17. Does your organization keep up with the latest critical updates on all its IT assets?
YesNo

18. Does your company have a Wi-Fi policy for routine password changes?
YesNo

19. Do your employees run company software on personal devices such as smartphones, etc.?
YesNo

20. Do you allow smart devices to sync to your company’s IT network?
YesNo