How does your business decide what software can be installed? 1. How does your business decide what software can be installed?
Anyone can install anything they find online. We usually ask someone, but there is no clear rule. One named person approves software, and it comes only from official sources.
How are updates handled on business computers? 2. How are updates handled on business computers?
Updates are often postponed or switched off. Updates happen sometimes, but nobody checks. Automatic updates are on, and someone checks regularly that devices are up to date.
Do staff use administrator accounts for daily work? 3. Do staff use administrator accounts for daily work?
Yes, everyone uses an admin account. Some do; we have not reviewed it. No, daily work uses standard accounts and admin rights are used only when needed.
How confident are you that you could restore from backup after ransomware? 4. How confident are you that you could restore from backup after ransomware?
We do not have a reliable backup. We have a backup, but it stays connected or has never been tested. We keep a separated backup and have tested a restore recently.
Is there a documented owner for the key control in this chapter? 5. Is there a documented owner for the key control in this chapter?
No / unknown Partially / informal Yes, documented and reviewed
Can the organisation provide current evidence that the control works? 6. Can the organisation provide current evidence that the control works?
No evidence Some evidence, not routinely checked Current evidence is reviewed
Are weaknesses tracked to an owner and target date? 7. Are weaknesses tracked to an owner and target date?
No consistent process Sometimes Yes, tracked to closure
Do employees know how to report a concern or incident? 8. Do employees know how to report a concern or incident?
No clear route Some employees know Clear route is communicated
Is this topic reviewed regularly and after significant changes? 9. Is this topic reviewed regularly and after significant changes?
Never / rarely Only after a problem Yes, with recorded review
See my result 0 of 9 answered