Infrastructure Management Institute

Security Assessment

  1. How is access to your facility controlled?
  2. How often do you have visitors at your facilities?
  3. How often do you employ contracted or temporary employees at your facilities?
  4. How many people have physical access to network nodes and links?
  5. How often are personal computers scanned for malware?
  1. How often is your anti-virus scanner updated?
  2. Does your business employ an enterprise level firewall?
  3. Does your business encrypt its data?
  4. What are your password requirements?
  5. How often are users required to change their passwords?
  1. How often do you backup critical data?
  2. How many people have access to backed-up media?
  3. Do access logs exist that record who access data?
  4. Do network assets have access control lists?
  5. Do you safely dispose of all written matter?