Cyber Security Self Assessment

1. Have you got a cyber security program and measures in place?

Yes

We have some basic security measures, but they aren’t regularly updated.

I am not sure, I need to check with our IT department

Does your security program include:

Regular network scans and vulnerability assessments

Strict access controls and regular monitoring for suspicious activity

Regular employee training on how to identify and prevent cyber threats

All of the above

None of the above

Can you elaborate on these measures?

We have firewalls in place, but haven't updated them in a while

We occasionally run anti-virus software, but don't have a set schedule for updates

We have some password policies in place, but they aren't regularly enforced

All of the above

None of the above

2. Have you ever experienced a cyber security breach or incident?

Yes

I am not aware of any past breaches or incidents

I am not authorised to disclose this information

None of the Above

What impact did the breach have on your business?

It affected a small portion of our network

It affected the entire network and caused significant downtime

It resulted in the loss or theft of sensitive data

It led to financial losses for the company

All of the above

3. How do you handle cyber security incident response and recovery?

We have an incident response plan in place and regularly train our employees on it

A designated incident response team handles any breaches or incidents

A third-party incident response provider assists with recovery

All of the above

None of the above

4. How do you protect against phishing and other social engineering attacks?

With spam filters and anti-phishing software

By regularly training employees on how to identify and avoid phishing attacks

We have implemented two-factor authentication for all accounts

All of the above

None of the above

5. How do you ensure compliance with industry regulations and standards?

We regularly review and update our security policies to align with industry regulations

We have a compliance officer or team responsible for monitoring and ensuring compliance

We conduct regular audits and assessments to verify compliance

All of the Above

None of the Above

What compliances is your business aligned with?

6. How do you manage access control and authentication for your systems and data?

We have role-based access controls

We use multi-factor authentication for all users

We regularly review and monitor user access logs

All of the above

None of the above

7. Do you regularly conduct vulnerability assessments and penetration testing?

Yes, we conduct regular vulnerability assessments

Yes, we conduct regular penetration testing

No, we do not conduct any regular testing

I am not aware of any testing

None of the above

8. How do you handle software updates and patch management?

We have a system in place for regularly downloading and installing software updates

We prioritise critical updates and patches for rapid installation

We test updates and patches before implementing them

All of the above

None of the above

9. How do you protect against data breaches and unauthorized access to sensitive information?

We have strict access controls

We encrypt sensitive data

We regularly monitor for suspicious activity

All of the above

None of the above

10. Do you have a disaster recovery plan in place in case of a successful cyberattack?

Yes

I'm not aware of one

I’m not authorised to disclose this information

None of the above

11. How do you currently manage your backups?

We on-premises backup

We use cloud-based backup services

We currently have no regular backup solution in place

All of the above

None of the above

12. How do you manage change control within your organization?

We have a formal change management process in place

Changes are made on an ad-hoc basis with minimal documentation

We rely on IT team or MSP to handle all changes

We do not have a formal change management process in place

None of the above

13. What statement best describes your businesses current Cyber Security defences?(Required)

We have no formal security program in place and little to no understanding of cyber risks.

We have a basic understanding of cyber risks and have implemented some security controls, but we’re not fully integrated into business operations.

We have a comprehensive security program in place and have formalized policies, procedures, and guidelines.

We regularly measure and assesses the effectiveness of our security controls and makes adjustments as needed.

We are constantly looking for ways to improve our cyber security program and proactively adapt to new threats and technologies.

Please supply your name and email address so we can contact you with the results!(Required)

First name Surname

Email(Required)

What is the name of your business?

Brisbane managed IT services and expert technology solutions with a focus on friendly and fast customer support!

A Cyber Security Self Assessment