Initial Cybersecurity Evaluation

Are there written security policies and procedures in place?

Are password and access controls in place and enforced?

Are anti-virus and anti-malware solutions deployed?

Are system logs regularly reviewed and monitored?

Is data encrypted at transit and rest?

Are security awareness and training programs in place?

Is there a disaster recovery and business continuity plan?

Are network and perimeter defenses in place?

Is vulnerability and patch management a regular practice?

Is there an existing asset inventory for all hardware and software systems, that managed by the company ?

Is multi-factor authentication used for remote access?

Is software up-to-date with security patches?

Are potential cybersecurity incidents identified and reported?

Is email security protection implemented?

Are network and system configurations regularly reviewed and updated?