Cyber Risk Checklist

✓ Are all user and privileged accounts protected with strong authentication?

✓Are users only given access to the systems and data they need?

✓Are user access permissions regularly reviewed and updated?

✓ Are employees securely able to access business resources from anywhere?

✓ Are all devices accessing your environment properly secured?

✓ Are security controls consistently enforced regardless of where users are working?

✓ Do you have visibility into where your sensitive and confidential data resides?

✓Is sensitive data protected wherever it resides?

✓Are access controls in place to protect sensitive data?

✓ Is sensitive information protected with strong encryption?

✓ Are encryption keys securely stored, managed, and protected?

✓ Are cryptographic keys regularly reviewed and rotated?

✓ Do you have complete visibility of your digital attack surface?

✓ Are vulnerabilities and security exposures continuously identified?

✓Can you identify which exposures pose the greatest risk to your business?

✓Are your security operations simple enough to manage efficiently?

✓ Do you have centralised visibility across your security environment?

✓ Can you efficiently manage security across multiple customers or environments?

✓ Do you have complete visibility across your network and application environment?

✓ Are your cloud, on-premises, and hybrid environments securely connected?

✓ Are connections between users, applications, and systems properly secured?

✓ Is sensitive data protected while it is being processed?

✓Are sensitive workloads isolated from unauthorised access?

✓Can you protect data while it is being processed in cloud or shared environments?

If you couldn't confidently answer every question, it's time for a cyber risk review.