Questionnaire

For Security Assessment

Please provide as much detail as possible.

     
Company Name
     
Scope of Assessment

Please give a summary of

your Main processes and
     
functions which relate to
the desired scope
What are your main legal
or regulatory obligations
and relevant industry      
standards (e.g.: Data
Privacy, Intellectual
Property rights)?

Please identify any

     
outsourced processes
Please draw / attached
Information Technology      
organization structure

Total Number of Employees (full and part time)

     
that are directly responsible for setting policies
and controls for Information Security

Maximum Number of Information Security

     
employees at this Location at any one time
Number of Part-Time Information Security
     
employees
How many Information Security Subcontractors
     
(Not included above)
Multi sites Yes No
If there is more than one site office location, please
           
indicate here:

Please describe your IT Number of Servers:      

Page 1 of 2
 Questionnaire
For Security Assessment

Number of Network Device (Switch, Router):      

Architecture:
Number of Security Devices (Firewall, SIEM, WAF, etc):      

      A - Use of proprietary licenced software only

      B - Use of proprietary licenced software with more than 10

licenced software applications

Please describe your Software:       C - Use of proprietary licenced software with more than 10
licenced software applications and running bespoke software

      D - Use of proprietary licenced software with more than 10

licenced software applications, running bespoke applications and also
design and development of bespoke applications
      A - No personal and/or commercial data (other than normal
public available data e.g. Land Registry)

      B - Personal and/or Commercial data that is supplied from

outside the company and does not constitute normal public available
Please describe your Business and
data (e.g.: Individual financial records). For internal use only
Data Type:
      C - As (B) above, but the data is shared to approved third parties

      D - As (C) above, but the data is shared to approved third parties
and data storage and analysis is hosted by an external third party
     
Name

Date      
1

Page 2 of 2