Cybersecurity Readiness Test "*" показва задължителните полета Стъпка 1 от 16 - Question 1 6% Does your organization have information security policies?* Yes No Does your organization have an incident response policy or guidance in case of cyber breach?* Yes No How does your organization handle digital assets inventory and monitoring?* With Remote Management & Monitoring (RMM) software With Digital Assets Management (DAM) software With Excel/Spreadsheet software Without any software How does your organization manage security logs and audit information from endpoints, systems and services?* By using Security Information and Event Management (SIEM) software By manually reviewing local logs from each endpoint/service By manually reviewing the log management interface for some of our systems/services We don't have any log management capabilities How does your organization manage backups?* By using centralized backup software solution where all your important information is being frequently saved By using local decentralized backups for each system of yours By manually moving all important information to other data storage solution (HDD, USB, Cloud) We are currently not backing up any of our information Is there 2FA implemented in some of the company’s systems or services?* Yes No How does your organization manage passwords and authentication secrets?* By using centralized / cloud password manager software for all employees By using decentralized / local password manager for all employees By storing passwords and secrets in plaintext files on the computer(s) By storing passwords in the browser How does your organization manage encryption and cryptographic software?* By using encryption software for all endpoints, including remote employees' laptops By using encryption software for all computers in the office By using encryption software only for a limited number of computers which store confidential data We don't have any encryption mechanisms in our company How does your organization manage remote employees' security?* By using both security policies and security software By using security software for all remote employees By only using security policies for all remote employees We don't have any employees working remotely Does your organization use any WAF or DDoS protection service or solution for your public IT infrastructure?* Yes No How does your organization handle security for all workstations?* By using Managed EDR/XDR By using Managed antivirus / endpoint protection By using inbuilt / free antivirus solutions We don't have any antivirus solution Which one of these solutions your company has currently implemented?* Security information and event management (SIEM) Endpoint Protection and Response (EDR) Managed Antivirus / Endpoint protection Hardware / Software Firewall in the Internal network System / Service monitoring solution (Grafana, Elastic, Zabbix etc.) Data Loss Prevention software (DLP) Email Security Gateway (ESG) Network Intrusion Detection System (NIDS) Does your organization hold any compliance or cybersecurity certification?* Yes No Have your organization performed a Penetration test / Vulnerability assessment for the last 12 months?* Yes No Is there a ‘password complexity minimum requirements policy’ enforced for all employees?* Yes No Information about your companyYour name* Your organization* Email address Phone
