Risk Assessment For Business

Which statement best describes your business and domain?

A relatively small business rather young organization,revolving around one product or service, not many clients.

Mid-sized company, one or several focuses, actively scaling or looking for ways to scale.

Big enterprise, multiple business directions/services, numerous business processes, complex and expensive internal software systems, highly competitive industry.

None

What is your organization’s password policy?

Every employee uses a strong secure password to access their work accounts and all related resources. They are required to change passwords every three months. They usually write them down to avoid forgetting.

Every employee uses a password manager to keep track of their numerous unique passwords and passphrases, PLUS they apply 2FA for accounts with sensitive information.

Every employee uses a password manager to keep track of their numerous unique passwords and passphrases.

I don't know.

None

How do you limit outside (remote) access to the company’s computer systems and data?

Endpoint security solutions in conjunction with prioritized employee access to data.

Setting up a strong corporate network security perimeter is the best option.

Multi-layered approach and the hierarchy of access rights for employees.

Does not apply.

I don't know.

None

How do you ensure security awareness among your employees?

In addition to secure password policy, we conduct regular employee training sessions based on social engineering, phishing, and other malicious practices.

Employees are verbally instructed to use unique strong passwords for their accounts on various resources.

Documented processes, strict password policy, regular cyber security training sessions, a clear “NO” to bring-your-own-device practices or work from home.

I don't know.

None

How do you manage access to the physical security perimeter in your company?

We track and identify all visitors (both employees and guests) and use additional security measures, such as video surveillance, personal electronic keys, biometrics, etc.

We track employee attendance and keep a guest log.

All employees and guests are tracked and required to sign in and sign out.

I don't know.

Does not apply, we don't have a physical office.

None

What is your company’s preferable way of storing data?

We resort to reputed cloud vendors or On-premises data storage with backups on other sites.

All data is encrypted, backuped, tested on restoring.

On-premises data storage without backups.

I don't know.

Does not apply, we don't store any data.

None

How do you treat customer info that you possess?

There is limited access to such information.

All at-risk data is encrypted or/and data is anonymized.

The less sensitive information collected, the better.

I don't know.

None

Do you check third-party software or software components before installing and using?

Configurations and security settings must always be checked and get both the system administrator’s and security engineer's approval.

If the software source is unknown, our system admins are alerted.

We use only trusted software with default provider configurations.

I don't know.

None

What rules of email and message exchange apply at your company?

Encryption and anti-spam are the best and only solutions.

Creating a safe senders list (white list) is a common practice along with encryption techniques.

Employees are strongly advised to avoid clicking on suspicious links from unknown senders.

I don't know.

None

10.

How is your company protected against ransomware attacks?

We use state-of-the-art software and employ an IT specialist.

We encrypt all data and use anti-malware software that protects us from cybersecurity threats.

It’s impossible to be 100% safe. That’s why we create frequent and iterative data back-ups and develop a precise disaster recovery plan.

I don't know.

None

11.

How often do you update your company software?

We carefully pick which updates to install. Some of them can be tricky and slow down our systems.

As soon as our system admins inform us that updates have been rolled out.

We rarely update anything to avoid any possible cyber threats.

I don't know.

None

12.

Do you use any IoT devices at your company? (e.g. smart plugs, lightbulbs, app-managed AC, etc.)

No, we don’t use any IoT devices.

We have a few, they help us optimize our energy consumption and/or collect useful data.

We try to leverage technology innovations to be as efficient and secure as possible.

None

13.

Does your company strive to adhere to cyber security compliance requirements?

We are currently considering investing into a certification.

We do not. It is not required for our industry and is a rather costly procedure.

We regularly pass the necessary certifications to stay compliant.

I don't know.

None

14.

Who is responsible for information security and cyber security at your company?

In-house IT department/ IT admin handles everything related to computer systems.

We use the professional services of a third-party cyber security organization.

We have a dedicated person/team responsible solely for cyber security.

There is no IT department / IT admin.

None

15.

Do you carry out penetration testing in your company?

We take annual mandatory cyber security tests and audits.

Every time any major cyber security-related changes or updates take place.

We have an IT department/ IT admin that monitors everything.

I don't know.

None

Name

Phone

How Cyber-Secure Is Your Business?

Forensic Intelligence Surveillance & Security Technologies

Quick Links

Products & Services

Customer Information

Our Office

Quick Links

Contact Info