Do you review the security controls of the vendors that you work with (SOC reports, Certifications, etc.) ?^*

Do you back up critical business data at least weekly?^*

Do you utilize any antivirus or endpoint protection software?^*

Do you keep all software and systems regularly updated?^*

Are user access rights and audit logs regularly reviewed?^*

Do you have an incident response and business continuity plan in case of a service disruption and are they tested and updated annually?^*

Do you utilize multi-factor authentication on key accounts (email, bank, etc.)?^*

Do all employees receive basic security awareness training?^*

First/Last Name

Email Address