Security services, software licences and managed support from one accountable partner.

NAPSECURE
Under attack? Talk to an expert
Cyber readiness assessment

Where does your security programme stand?

Twelve questions, about five minutes. You get an indicative score by domain and the areas to tackle first. Nothing is stored unless you ask for a walkthrough.

1 A named executive owns cyber risk and reports on it to leadership at least quarterly.
2 Security policies are approved, current and mapped to the regulations that apply to you.
3 Multi-factor authentication is enforced for email, remote access and all admin accounts.
4 Privileged access is limited, reviewed regularly and removed when people change roles or leave.
5 Every laptop and server runs managed endpoint protection that someone actively monitors.
6 Internet-facing systems are scanned for vulnerabilities and critical fixes have deadlines.
7 You know where sensitive and regulated data lives and who can access it.
8 Sensitive data is encrypted and leaks through email, cloud or removable media are controlled.
9 Security logs are collected centrally and reviewed around the clock, in-house or by a provider.
10 A written incident plan exists, roles are named and it was rehearsed in the last 12 months.
11 Backups are isolated from the main network and a restore has been tested recently.
12 Critical suppliers are assessed for security and contracts require incident notification.
Want a walkthrough of your result? (optional)

This self-assessment is indicative and based on your own answers. It is not an audit or a guarantee of security.