Take Our Digital Assurance Questionnaire

Are your devices and network secure?
This includes securing any routers or devices which are connected or using the network. Appropriate software and internet firewalls have been set up to stop unwanted connections and to ensure device security.
Yes No Some, but not all
Are user and admin accounts following the correct procedure to ensure the best security?
Employees should be informed of their security obligations and responsibilities immediately after employment.
Yes No Not always
Do you have procedures and controls in place to protect your devices and network from malware?
This includes up-to-date antivirus software on all devices and active applications that limit access across your network to certain users.
Yes No Some, but not all
Does your organisation have a good understanding of its assets and ensure the best security for these assets?
An up-to-date asset information and asset register is in use. All devices that have access to information are encrypted and password protected.
Yes No Some, but not all
Does your organisation have a sufficient risk assessment?
An annual risk assessment should identify which actions will be taken for each risk and an action plan should be in place to implement any actions identified in the risk assessment.
Yes No We need advice

Do you have adequate data protection policies and procedures in place to comply with your country's data protection legislation?
Compliance with the UK GDPR is required. If you process personal data of subjects outside the UK it must meet the other countries' regulations and legislation. Policies and procedures should be in place and in use to mitigate risks to personal data.
Yes No Some, but not all
Do you ensure your employees know their responsibilities when dealing with personal data?
Employees should be informed of their security obligations and responsibilities immediately after employment.
Yes No Some, but not all
Does your organisation have an implemented security policy to match its risk profile?
Security policies should be distributed to all employees and form part of their contractual obligations. Your suppliers should meet a set of security requirements you have defined around handling personal data.
Yes No We need advice
Does your organisation monitor and track activity on your systems?
Monitoring should help identify suspicious activity on your systems. It is required to track and monitor business systems and processes according to your information safety policies to ensure compliance.
Yes No Some, but not all
Do you have security incident management procedures and business continuity plans?
These procedures should ensure that any incidents (loss of data, phishing attacks etc.) are dealt with successfully or to the best of your ability.
Yes No We need advice

If you would like more information on Cyber Essentials assessment or any other Infosec programs, please complete and submit the form below. Our Digital Assurance team will be in touch to discuss your requirements further.
Name*
Email*
Phone Number*
Company Name*
CAPTCHA
Phone
This field is for validation purposes and should be left unchanged.

Digital Assurance Questionnaire