Cyber Security Check: Check your IT security

Organisation

What measures is your company not yet implementing? More than one response possible.

Person responsible for IT security An internal or external person is responsible for IT security at my company.

IT systems with authorization levels Depending on their function and tasks, employees are assigned different authorization levels (including administrator rights) in the IT systems.

Access policies In my company there are access policies which are actually applied.

Multi-factor authentication Remote access to our network, access to clouds or other web-based services and internet portals are protected with multi-factor authentication (MFA).

Awareness of cyber risks My employees are regularly alerted to the existence of cyber risks (e.g. fake e-mails or websites that are used to fraudulently obtain usernames and passwords).

All measures are met

Data protection

What measures are relevant to your company but are not yet being implemented? More than one response possible.

Data is encrypted Particularly sensitive data is encrypted, and data protection laws are observed in my company.

Encrypted communication We transmit data via a secure, encrypted internet communication connection (e.g. VPN).

Protection for computers and servers The computer, server and network infrastructure is appropriately protected against physical access by third parties.

PCI DSS standards are complied with We are familiar with and meet the Payment Card Industry Data Security Standards (PCI DSS).

All measures are met

Data backup

What measures is your company not yet implementing? More than one response possible.

Daily backups In my company, data is backed up daily.

Backup quality test Backup data is regularly checked in terms of functionality and readability.

Secure data storage Backups are stored in a safe place in my company - offline or as an immutable backup on a cloud.

All measures are met

Technical protection measures

What measures are relevant to your company but are not yet being implemented? More than one response possible.

Technical protection measures are in place Current and industry-standard protective measures, such as anti-virus protection, spam filters, firewalls, restricted and secure WLAN access, etc., are installed in my company.

Patch and update management All devices and systems connected to the internet receive the latest security updates in a timely manner.

Automatic software updates We make use of the automatic updating option for software.

Surge protection for servers An uninterruptible power supply is ensured for our servers and other central infrastructure components by means of surge protection.

All measures are met

Contingency management

What measures are relevant to your company but are not yet being implemented? More than one response possible.

Emergency measures for cyber incidents In my company, the emergency measures in the event of a cyber incident are clearly defined (e.g. by means of a contingency plan).

Contact person in the event of cyber incidents We have defined an IT person/contact person for the event of a cyber incident (e.g. malfunctioning, attack, etc.) and they are available at all times.

Defence strategy against DoS attacks My company has a defence strategy against DoS attacks.

All measures are met

Cyber Security Check. Check your IT security.