Free Quiz: Check your readiness for CSA Cyber Essentials Certification

Tech Support: IT Support - Understanding the level of support you have

Do you have a dedicated person who is IT savvy in the company to handle all the IT related requests? *

Do you currently engage an external IT outsourcing company for your business needs? *

Assets: People – Equip employees with know-how to be the first line of defense

Do you have documented information on cybersecurity awareness training for employees? *

Is your cybersecurity awareness training conducted at least annually to refresh employees’ awareness? *

Assets: Hardware and software – Know what hardware and software the organisation has and protect them

Do you maintain an up-to-date asset inventory of all hardware and software assets? *

Does your asset inventory contain details of hardware assets, such as the hardware name, serial number, location, and end-of-support date? *

Assets: Data – Know what data the organisation has, where they are, and secure the data

Do you have documented information of a process to protect business-critical data, such as using password-protected documents or encryption? *

Do you have documented information and/or an implemented process for securely disposing of confidential or sensitive paper-based media, such as shredding? *

Secure/Protect: Virus and malware protection – Protect from malicious software like viruses and malware

Does your anti-virus/anti-malware solution include documented functionality and implementation for mobile devices, IoT devices, cloud platforms, and secure web browsing or email use? *

Do you have a network and/or systems diagram and documented information on the configuration of firewalls to protect your network, systems, and endpoints? *

Secure/Protect: Access control – Control access to the organisation’s data and services

Do you maintain an inventory of user accounts and documented information on employees’ roles, employment periods, and functional roles? *

Do you have documented information on the process to grant and revoke access, including necessary approvals during onboarding, role changes, or offboarding? *

Do you require third parties or contractors working with sensitive information to sign a non-disclosure agreement with included disciplinary actions for violations? *

Do you have documented information outlining the use of two-factor authentication (2FA) for administrative access to critical systems? *

Secure/Protect: Secure configuration – Use secure settings for the organisation’s hardware and software

Do you ensure weak or default configurations are avoided or updated before use, such as changing default passwords and performing deep anti-malware scans? *

Update: Software updates – Update software on devices and systems

Does your organisation prioritise and document critical or important updates for operating systems and applications, including security patches? *

Are responsibilities for updates clearly defined between your organisation and Cloud Service Providers (CSP)? *

Backup: Back up essential data – Back up the organisation’s essential data and store them offline

Has your organisation identified business-critical systems and essential business information for regular backups, as part of cybersecurity incident recovery? *

Does your organisation store backups in diverse locations, such as hard drives or multiple clouds? *

Respond: Incident response – Be ready to detect, respond to, and recover from cybersecurity incidents

Does your organisation have an up-to-date incident response plan detailing roles, procedures, and communication plans for responding to cybersecurity incidents? *

Contact Information

First Name *

Last Name *

Company Name *

Email *

Phone *

We will be sending you your score via email with a free 30 minutes consultation to explain the results. After that, you will also receive fun insider scoop on all the up and coming IT news. Rest assure that we’ll guard your contact details and would never sell or hand them over to any third parties!