Free Risk Maturity Assessment

These 12 questions are a small sample to determine a general baseline on risk maturity. It is recommended no matter the result to do a consultation with Airius and/or a more detailed risk maturity assessment filled out.

Name

Email

Does your organization have a Chief Information Security Officer (CISO)?

ISO 27001 2013 - A.5 - Information security policies

Yes

No

Not Sure

Does your organization have staff dedicated to risk management and incident response?

ISO 27001 2013 - A.6 - Organization of information security and ISO 27001 2013 - A.16 - Information security incident management

Yes

No

Not Sure

Does your organization have a comprehensive Risk Management Framework (policies) covering acceptable use, incident response, anti-malware, network security, etc.?

ISO 27001 2013 - A.5 - Information security policies

Yes

No

Not Sure

Does your organization have an email security product/service to identify phishing and spoofing related attacks beyond the out of box Google or Microsoft provided email protection?

ISO 27001 2013 - A.13 - Communications security

Yes

No

Not Sure

Has your organization had a security breach of some kind in the past 12 months?

ISO 27001 2013 - A.16 - Information security incident management

Yes

No

Not Sure

Does your organization have network security monitoring coverage?

ISO 27001 2013 - A.13 - Communications security

Yes

No

Not Sure

Does your organization have endpoint security software to identify more advanced/targeted threats beyond basic anti-virus?

ISO 27001 2013 - A.12 -Operations security

Yes

No

Not Sure

Does your organization perform application code vulnerability scanning?

ISO 27001 2013 - A.12 -Operations security

Yes

No

Not Sure

Does your organization regularly perform vulnerability testing?

ISO 27001 2013 - A.12 -Operations security

Yes

No

Not Sure

Does your organization regularly perform penetration testing?

ISO 27001 2013 - A.12 -Operations security

Yes

No

Not Sure

Does your organization regularly perform security awareness training and phishing simulations?

ISO 27001 2013 - A.7 - Human resource security

Yes

No

Not Sure

Does your organization have cyber breach insurance?

ISO 27001 2013 - A.18 - Compliance

Yes

No

Not Sure

Details on Responses Above (Optional)

SCORING DETAILS

Risk Maturity Score Breakdown

0-3 points - Low Risk

4-6 points - Medium Risk

7+ points - High Risk

Score

High Risk Score

It appears that your organization is at high risk. An in depth detailed assessment and/or discussion is strongly recommended.

Medium Risk Score

It appears that your organization is at medium risk maturity based on this brief assessment. An in depth detailed assessment and/or discussion is strongly recommended.

I would like to be contacted to further discuss

Yes

No

Already in contact

Low Risk Score

It appears that your organization may be low risk based on the limited questions asked. This is only a very small sample in evaluating risk maturity. An in depth detailed assessment and/or discussion is strongly recommended.

Services

Regulatory Compliance Frameworks

Take our Free Risk Assessment to get a peak into where your company stands