Inizia

Cybersecurity and IT Practices Assessment Questionnaire

Inizia

Cybersecurity and IT Practices Assessment Questionnaire

This questionnaire is designed to assess the current state of IT and cybersecurity practices within your organization. The information gathered will help identify strengths, potential gaps, and opportunities for improvement in securing your systems, networks, and data. Please answer each question to the best of your ability to provide a comprehensive overview of your organization's IT and security landscape.

Company *

Company PoC Name *

Company PoC Email *

Does the company have an IT department? If not, how are IT resources managed? *
Description (optional)

Is there a detailed inventory of IT equipment within the company? *

Does the inventory include both hardware and software specifications? *

Are there one or more firewalls in the company? If yes, which are the manufacturers? *

Which network devices are present in the company? (e.g., switches, routers, access points) *

Are default passwords changed on IT devices (network devices, printers, etc.)? *

How are passwords managed within the company? Is a password vault used *

Does the company use VPNs? If yes, which products are used? *

Does the company use Multi-Factor Authentication (MFA) for accessing systems? *

Are there policies for password management and periodic changes? *

Does the company have Wi-Fi? If yes, which protocols are used? *

Is there a dedicated Wi-Fi network for guests or are VLANs used for segmentation? *

Are there Network Access Control (NAC) tools in use? If yes, which ones? *

Are SIEM (Security Information and Event Management) or SOAR (Security Orchestration Automation and Response) tools used? If yes, which products? *

Are EDR (Endpoint Detection and Response), XDR (Extended Detection and Response), or MDR (Managed Detection and Response) tools used? If yes, which products? *

Is there a process for vulnerability and patch management? *

Is there a defined process for managing cyber incidents? *

Is there a process or procedure in place for data backup and recovery? *

Are disaster recovery plans tested regularly? *

Does the company conduct phishing simulations to test employee awareness? *

Are employees trained on cybersecurity best practices?

Cybersecurity and IT Practices Assessment Questionnaire

Click Invia to finish.