Name

Email

Company Name

Phone

Hardware

Do you maintain a complete and up-to-date inventory of all hardware assets?

0 - Unsure

1 - No hardware asset list or very out of date.

2 - Hardware asset inventory is incomplete or outdated (over 6 months old).

3 - Hardware asset inventory is in place, complete, and updated within the last month.

Are your desktops and notebooks business-grade models from HP, Dell, Lenovo, Microsoft, or Apple?

0 - Unsure

1- Computers are a mix of brands and consumer- and business-grade devices.

2 - Computers are business grade but multiple brands.

3 - All computers are business grade and one brand.

Do you have a Next-Gen firewall with active security services that is less than 5 years old and still under warranty?

0 - Unsure

1 - No Next-Gen firewall, only ISP modem or consumer router.

2 - Firewall is Next-Gen model but is without active security services or is 5+ years old.

3 - Firewall is a Next-Gen model, with active security services, and is <5 years old.

Page 1 of 5

Software

Do you maintain a complete and up-to-date inventory of all software and software versions on all computers?

0 - Unsure

1 - Installed software asset list is not in place.

2 - There is a software list, but it is over 6 months old and does not list what computers it is installed on.

3 - Installed software asset list is in place, up to date, with version information and updated continuously.

Is your workstation OS past End of Life (EOL)?

0 - Unsure

1 - Some computers have Windows XP, 7, or 8 installed.

2 - All computers have Windows 10 or 11 installed but are not on either of the last two feature releases.

3 - All computers have Windows 10 or 11 installed and are on one of the two latest feature releases.

Is your server operating system (OS) past End of Life (EOL)?

0 - Unsure

1 - Some server OSes are past EOL, i.e., Server 2012 R2 or earlier.

2 - Some server OSes are approaching EOL, i.e., Server 2016.

3 - All server OSes are 2019 or newer.

Page 2 of 5

Security

Do all your computers have Managed Endpoint Detection and Response (MDR) in place?

0 - Unsure

1 - Have classic anti-virus.

2 - Have Endpoint Detection and Response (EDR), but it is not monitored 24/7.

3 - MDR is in place and monitored by a Security Operation Center (SOC) 24/7.

Do you have automated patching in place for all computers and servers?

0 - Unsure

1 - No automated patching.

2 - Automated patching is in place, but it is inconsistent. Some computers are up to date, and others are not.

3 - Automated patching systems are in place and all computers are up to date.

Do you have Web Filtering and DNS Security in place both on and off the corporate network?

0 - Unsure

1 - No web filter/DNS security implemented.

2 - Web Filter/DNS Security is in place (on the Corp network only).

3 - Web filter/DNS security is in place (both on/off Corp network).

Are all your endpoint hard drives encrypted using BitLocker for Windows or FileVault for Mac?

0 - Unsure

1 - Computer encryption is not in place.

2 - Some computers may have encryption enabled and centralized key storage has not been set up.

3 - Endpoint encryption is implemented and encryption keys are stored in a centralized system.

Page 3 of 5

IT Management

Do you have a three year IT budget in place?

0 - Unsure

1 - Three year IT budget not in place.

2 - Have a rough idea of what to spend on IT this year.

3 - Three year IT budget is in place and is updated regularly.

Do you have a Cyber Liability Policy in place?

0 - Unsure

1 - Cyber Liability Policy not in place.

2 - Discussed Cyber Liability with insurance company.

3 - Have a Cyber Liability Policy in place.

Page 4 of 5

Business Continuity

Are your servers automatically backed up daily (or more frequently) with immediate off-site replication?

0 - Unsure

1 - Servers are backed up manually.

2 - Servers are backed up, and backup is stored on local server or attached hard drive.

3 - Servers are backed up automatically and image is sent off-site immediately.

Are backups of your Microsoft 365 mailboxes taking place?

0 - Unsure

1 - No M365 backup in place.

2 - Some mailboxes are backed up; others rely on M365 30-day retention.

3 - All mailboxes are backed up with unlimited retention.

Are backups of your Microsoft OneDrive and SharePoint taking place?

0 - Unsure

1 - No M365 backup in place.

2 - Some mailboxes are backed up; others rely on M365 30-day retention.

3 - OneDrive and SharePoint data is backed up with unlimited retention.

Compliance Assessment

Hardware

Page 1 of 5

Software

Page 2 of 5

Security

Page 3 of 5

IT Management

Page 4 of 5

Business Continuity

Page 5 of 5

Recent Posts

Services