Your Name:

Your Phone:

Your Email:

1. Does your Board ask questions about Cyber security and require reports? 

YesNo

2. Is there an Executive accountable/responsible for Cyber Security? 

YesNo

3. Do you have designated person/team for Cyber Security?  

YesNo

4. Is cyber security embedded in your organization? 

YesNo

5. Is Cyber Security Part of OT or IT budget? 

YesNo

6. Do you have a established Cyber Security Program in place based on industry standard – NIST CSF, ISO etc? 

YesNo

7. Have you documented, circulated, and implemented cyber security policies and standards? 

YesNo

8. Do you have any industry compliance requirements you must adhere to?  

YesNo

9. Have you identified and classified your information to understand what you are protecting?

YesNo

10. Do you have an inventory of all cyber assets in the organization? 

YesNo

11. Do you perform cyber security risk assessments for all IT /OT projects?  

YesNo

12. Do you have Change Control processes in place?  

YesNo

13. Do you participate in any kind of security awareness training? 

YesNo

14. Do you have Cyber Security in your Supply Chain/Legal? (where third parties are vetted for their cyber security practices) 

YesNo

15. Do you have an Cyber Security Incident Management plan in place? 

YesNo

16. Do you routinely perform Back up and Restores of your information? 

YesNo

17. Do you actively log and monitor activities?  

YesNo

18. Do you have a Business Continuity and Disaster Recovery Plans in place? 

YesNo

19. Do you perform vulnerability and penetration testing on a regular basis? 

YesNo