Questionnaire

Company/organization’s Name

First name and Surname

Email Address

Phone Number

What specific type of service are you interested in receiving assistance with?

Please check all that apply.

Please briefly describe your business or the scope of your organization’s work.

(e.g. we sell office equipment)

How many employees do you have?

The size of an organisation is a substantial factor in determining an effective security management system.

Please briefly describe the organizational structure of the company.

(e.g. 5 core divisions – Production, IT, Sales & Marketing, Legal & Finance, HR)

List localities you use for your business and their basic character.

(e.g. office building with its own reception)

What legislation applies to your business?

(e.g. Personal Data Protection Law etc. Please also indicate if you have not yet assessed what legislation applies to you.)

How many information systems do you have?

Please name them (e.g. Customer relationship management, Enterprise resource planning etc.)

What operating systems and platforms do you use?

Please list key services that your company outsources to third parties.

(e.g. application development and maintenance, data center management etc.)

What kind of information does your company process?

(e.g. customer data, personal data, payment data, etc.)

Have you ever performed any kind of audit in terms of information security?

( e.g. ISO27001, SOC 2, CyberGRX assessment etc.)

How many workstations and mobile devices do you manage (you have control over them)? How many more are used for your business and you do not have control over them?

Please indicate at least the approximate numbers.

Do you maintain your own infrastructure (servers and networks) on the premise? Do you operate some part of your infrastructure in cloud? What kind of cloud services do you use?

(e.g. IaaS, SaaS, etc.)

Have you assessed security requirements from your customers (based on service agreements) and other legal and regulatory risks?

Have you assigned a person responsible for information security?

(e.g. the target date by which you need to receive the service due to an audit deadline)

Have you ever conducted a risk assessment for your business/organization?

Have you documented your company assets?

If you develop your own systems or applications, including those for third parties, do you have a secure development lifecycle, follow best practices like OWASP top 10, and conduct secure architecture design, code analysis, vulnerability scanning, and penetration testing?

Is there any specific service you would like to discuss with us, or is there anything else you feel is important to mention?

We are interested in learning about the factors that have led you to reach out to Binary Confidence.

Please check all that apply.