IT Security Assessment

An IT Security Assessment is a great way to take an inventory of what your needs are in IT Security. Whether you must comply with regulatory requirements, including HIPAA and PCI, or are concerned about your IT Security, consider an IT Security Assessment as a starting point to see how your company is protected today.

If you perform an IT Security Self Assessment, the Computer Technology Industry Association, CompTIA recommends you ask yourself some of the following questions:

Data Types and Storage

1. Do you store Private Health Information (e.g. HR records)? If so, how many records?
2. Do you store Personal Financial Information (e.g. SSN, date of birth, account information, banking information)? How many records?
3. Do you store credit card data? How many records?
4. What is the nature of your confidential intellectual property?
5. Where do you do business – state, national, international?
6. Where are backup devices (tapes, drives) stored? In a secured area?

Company Information

1. What is your tolerance for downtime (for the most critical applications)?
2. Do you carry breach insurance?
3. Do you carry liability insurance?
4. Have you had a breach in the past three years? If so, what were the consequences?

Security Processes

1. Do you have written security policies and procedures?
2. Do you perform internal audits? How often?
3. Do you perform external audits? How often?
4. Do you perform vulnerability checks? How often?
5. Do you regularly review policies and procedures?
6. Do you have an incident response plan?
7. Do you have employees working from home?
8. Do you have encrypted hard drives? Removable media?
9. Do you control and log privileged access?
10. Do you have a mobile device strategy?

These are some of the questions you should ask yourself when you perform an IT Security Self Assessment. For a complete IT Security Assessment and network health check, contact your IT Service Provider today.