Does your business know which digital services it depends on most? 1. Does your business know which digital services it depends on most?
We have never listed them. We roughly know, but nothing is written down and owners are unclear. We have a short written list of critical services, each with a named owner.
How do staff check a message that asks for payment, KYC updates or login details? 2. How do staff check a message that asks for payment, KYC updates or login details?
They usually follow the link or number in the message. Some people verify independently, but there is no shared rule. Everyone knows to verify through an official app, a typed address or a saved number before acting.
Do staff know what to do immediately after suspected financial fraud? 3. Do staff know what to do immediately after suspected financial fraud?
No, people would probably wait or try to sort it out themselves. Some know to call the bank, but 1930 and cybercrime.gov.in are not widely known. Everyone knows to contact the bank, call 1930, report at cybercrime.gov.in and tell the owner straight away.
When someone reports a suspicious message or admits a mistake, how does the business respond? 4. When someone reports a suspicious message or admits a mistake, how does the business respond?
Reports are rare and mistakes are usually hidden. Reports happen, but there is no clear person to tell or follow-up. There is a known contact, reports are thanked, and warnings are shared quickly with the team.
Is there a documented owner for the key control in this chapter? 5. Is there a documented owner for the key control in this chapter?
No / unknown Partially / informal Yes, documented and reviewed
Can the organisation provide current evidence that the control works? 6. Can the organisation provide current evidence that the control works?
No evidence Some evidence, not routinely checked Current evidence is reviewed
Are weaknesses tracked to an owner and target date? 7. Are weaknesses tracked to an owner and target date?
No consistent process Sometimes Yes, tracked to closure
Do employees know how to report a concern or incident? 8. Do employees know how to report a concern or incident?
No clear route Some employees know Clear route is communicated
Is this topic reviewed regularly and after significant changes? 9. Is this topic reviewed regularly and after significant changes?
Never / rarely Only after a problem Yes, with recorded review
See my result 0 of 9 answered