Identity Security

Do you enforce MFA for all privileged users?

Do you immediately remove access for former employees?

Do you regularly review who has access to sensitive systems?

Visibility

Do you have a complete inventory of your IT assets?

Do you know where your sensitive data resides?

Do you continuously identify security exposures?

Ransomware Protection

Can you can recover critical systems quickly?

Do you protect and monitor Active Directory?

Do you regularly test your backups?

Data Security

Do you encrypt sensitive information?

Do you enforce least-privilege to confidential data?

Do you monitor for unusual data access?

Threat Detection

Do you review security alerts daily?

Do you use threat intelligence to inform your security decisions?

Do you have an incident response plan?