Calculate your organization's overall security risk score. Identify high-risk areas and prioritize security improvements based on impact.
What percentage of sensitive data is encrypted at rest and in transit?
How well is your data classified and labeled by sensitivity level?
How frequently and reliably is critical data backed up and tested?
How well are data access controls implemented and monitored?
What percentage of systems require MFA for access?
How strong and enforced are your password policies?
How well is privileged/administrative access controlled and monitored?
How quickly are accounts deactivated when employees leave?
How comprehensive and up-to-date is your firewall configuration?
How well is your network segmented to limit breach impact?
Do you have active intrusion detection and prevention systems?
How secure is your remote access infrastructure?
What percentage of endpoints have active antivirus/EDR protection?
How quickly are security patches applied to systems?
How well are mobile and remote devices managed and secured?
How comprehensive is your 24/7 security monitoring?
How mature and tested is your incident response capability?
How well are security logs collected, retained, and analyzed?
How comprehensive and enforced are your security policies?
How frequently and effectively do you train staff on security?
How regularly do you conduct comprehensive risk assessments?
How well do you assess and manage third-party vendor risks?
Please answer all risk factors to see your results