The Foundation - IT Security Quiz

Security Questionnaire

Security is important, but sadly sometimes forgotten about or an afterthought. Take this quick 10-question quiz to find out how your organization is doing. Be honest. We won't judge you. We just want to help you.

Do you have an accurate inventory of all your technology and software?*
- Yes, I know where everything is
- I honestly have no idea
- I know where most things are, and roughly how many licenses we own
Do you have an accurate idea of who has access to what data?*
- Yes, internally, but unsure about third party access
- Yes, we log all access, and create accounts for all contractors or partners
- No, but I trust my team
- I have no idea
Do you know where all of your corporate data is?*
- We have a pretty good idea of where things are, yes
- For the most part, yes
- I have no idea
- Yes, it’s documented and we know where data is at rest, and in transit
Do you grant access to your data based on roles and need?*
- No, other than perhaps a few files or folders
- I have no idea
- Mostly, but some people may have access to more than the absolutely need
- Yes, access is only granted to those who need the data as part of their role
Do any team members use unapproved apps like Dropbox, Box, iCloud, or other storage solutions to bypass your company security?*
- No, we tell people not to do that
- No, we block access to unapproved sharing services
- I have no idea
- We tell people, but have no way to audit that
Do you know how your data is being backed up?*
- Sort of - I know things get backed up, just not where or how
- Yes, it’s documented and is in line with our risk tolerance
- Hopefully - I trust the users to do it on their own
- I have no idea
Are all of your computers encrypted? (e.g. FileVault is enabled)*
- Yes, and we can audit that at any point in time, and use institutional encryption
- Yes, but with personal encryption keys
- Some are
- No, no need
- I have no idea
Do you have antivirus and anti malware software installed?*
- I have no idea
- Yes, both at the firewall and endpoint layers that is fully managed and patched
- Yes, but it’s not up to date
- No, “because we have Macs”
- Yes, but only at either the firewall or the endpoints
Policies and Procedures
Do your clients or prospects require data security and/or retention policies to work with them?*
- Nope
- Oh wow, client’s can ask that of us now?
- Yes, we have clients that are in healthcare, financial services, or other organizations that require our compliance
- Yes, but I don’t understand what any of it means
Do you have employee policies in place for acceptable use of company assets, including data and the internet?*
- Yes, all employees sign these policies annually
- No, but our handbook has some things in it
- I have no idea
- Yes at onboarding
Do you have formalized conversations with your team about data security?*
- When something comes up, yes
- Nothing formal that I know about
- Yes, we review things every quarter
- Yes, at onboarding
Do you have a business continuity plan?*
- Sort of
- I have no idea what that even is
- It’s in progress
- Yes
Phone
This field is for validation purposes and should be left unchanged.

Security Questionnaire

Policies and Procedures

Learn more about Foundation

Find us on