Cyber Security Form

01. Are regular vulnerability assessments and penetration tests conducted on the company's systems and applications?

Yes No

02. Are security patches and updates applied promptly across all systems and applications?

Yes No

03. Does the company have strong network and system monitoring tools?

Yes No

04. If so, would you mind telling us what they are?

05. Does your company have a process in place for monitoring and analyzing security logs and alerts for suspicious activity?

Yes No

06. If so, would you mind giving us a general understanding of that process in place?

07. Has data classfication been done by the company?

Yes No

08. Does your company have data loss prevention in place to avoid unwanted data disclosure?

Yes No

09. Are there documented procedures to respond and to remediate identified vulnerabilities in a timely manner?

Yes No

10. Are data encryption and other data protection measures implemented to safeguard sensitive information from unauthorized access or disclosure?

Yes No

11. Are regular backups of critical data taking place?

Yes No

12. Are those backups tested to ensure their integrity and availability in an event of a security incident?

Yes No

13. Are services and devices hardned to ensure security?

Yes No

14. Does your company have proper identity management in place?

Yes No

15. Does your company have remote users?

Yes No

16. Does your company have secure remote access setup for its employees or users? ( such as VPN )

Yes No

17. Does your company have cloud security controls in place?

Yes No

18. Does your company have physical security controls for on-preme data centers?

Yes No

19. Does your company have end user protection mechanisms? ( such as EDR, Anti Malware, etc. )

Yes No

20. Does your company have privilege access management in place?

Yes No

21. Are regulatory assessments conducted in a timely manner by your company?

Yes No

22. Does your company conduct regular Cyber Security training and awareness programs for its employees to recognize and report potential vulnerabilities?

Yes No

23. Does your company have well documented and up-to-date inventory of its hardware, software, and network infrastructure?

Yes No

24. Does your company have a proper JML ( Joiners, Movers, and Leavers ) HR process?

Yes No

25. Does your company perform periodic audits, access reviews, etc?

Yes No

26. Does your company have trained staff for security function ( Security Policy & Security Objective )?

Yes No

27. Does your company have a risk register with a list of already identified risks?

Yes No

LK Simulations (Pvt) Ltd. is a Board of Investments (BOI) registered information technology solutions provider in Sri Lanka

Web Development

Mobile Development

SEO Services

Simulations

AR & VR Development

Surveillance

CYBER SECURITY FORM

LK Simulations (Pvt) Ltd. is a Board of Investments (BOI) registered information technology solutions provider in Sri Lanka

info@lksim.com

30 Deanston Place, Colombo 003, Sri Lanka

(+94) 11 257 3522

© 2015 – 2024 LK Simulations (Pvt) Ltd.