cybersecurity health check

• Site conducted

  Select

• Conducted on

  Date

• Prepared by

• Location
  Address

• Do you have a written cybersecurity policy?

  Yes

  No

  N/A

• Is your cybersecurity policy reviewed and updated at least annually?

  Yes

  No

  N/A

• Do you have a Chief Information Security Officer (CISO) or equivalent?

  Yes

  No

  N/A

• Do you have a staff comprised of at least two full-time equivalent (FTE) employees dedicated to cybersecurity?

  Yes

  No

  N/A

• Do you have a designated incident response team?

  Yes

  No

  N/A

• Do you have a business continuity/disaster recovery plan that includes cybersecurity?

  Yes

  No

  N/A

• Yes

  No

  N/A

People

• Are your users aware of cyber security threats?

  Yes

  No

  N/A

• Do users know how o respond to attempted or actual cyber-attacks?

  Yes

  No

  N/A

• Are users restricted to what information and business systems they can access?

  Yes

  No

  N/A

Processes

• Do you have and maintain a list of IT and information assets?

  Yes

  No

  N/A

• Do you allow users to use their own devices?

  Yes

  No

  N/A

• How are risks managed within your organisation?

  Yes

  No

  N/A

• Are your devices regularly updated (patched)?

  Yes

  No

  N/A

• Do you have company-wide policies for IT and cyber security?

  Yes

  No

  N/A

Technology

• Does your company secured connect to the Internet?

  Yes

  No

  N/A

• Are your systems regularly checked for vulnerabilities?

  Yes

  No

  N/A

• Are your systems monitored for threats and potential cyber-attacks?

  Yes

  No

  N/A

• Are your devices protected from viruses and malicious software?

  Yes

  No

  N/A

• Is your data backed up?

  Yes

  No

  N/A

Data Protection

• Do you have Data Protection Policies and privacy Notices?

  Yes

  No

  N/A

• Do you have a register of all your personal data information assets?

  Yes

  No

  N/A

• Do you have a nominated individual responsible for data protection?

  Yes

  No

  N/A

• Do you have a formalised data subject access request process?

  Yes

  No

  N/A

Organisation

• Do you have IT and Cyber Support in place?

  Yes

  No

  N/A

• How many physical users in the office?

• How many remote/home users?