Cyber Maturity Assessment Questionaries

Name:

Organization:

Email:

Phone:

Title:

Leadership & Strategy

1. Our executive leadership regularly communicates the importance of cybersecurity.

2. Cybersecurity is considered a priority in our organization's strategic planning.

3. We have a dedicated budget for security awareness and culture initiatives.

4. Cybersecurity topics are regularly included in Board of Directors meetings.

Awareness & Behaviour

1. All employees, including our executive leadership, regularly receive security awareness training.

2. Our security training content is engaging and relevant to employee's roles.

3. We assess the effectiveness of our awareness training.

4. Strong unique passwords are used across our organization.

5. Employees understand and follow our data handling process.

Employee-Focused Security Tools

1. We have implemented Multi-Factor Authentication (MFA) across all our system and users.

2. We provide and encourage the use of password managers.

3. We have integrated email button for reporting suspected phishing attempts.

4. We provide automated real-time training/coaching based on observed behaviour.

Policies & Procedures

1. Our security policies are clear, accessible, and regularly updated.

2. We have an efficient process for reporting and responding to security incidents.

3. Security considerations are integrated into our change management processes.

4. Organizational policies outside of security do not work against our security awareness initiatives and messaging.

Employee Mindset

1. Employees feel personally responsible for the organization's security posture.

2. Security threats and best practices are openly discussed and shared among Co-workers.

3. There's a positive attitude towards security measures across the organization.

4. Failing a simulated phishing test is viewed as a valuable learning experience in security awareness training, not a reason to punish users.

Measurement & Metrics

1. We regularly assess our organization's security culture.

2. We use metrics to track the effectiveness of our security awareness program.

3. Security -related KPIs are included in management reporting.

Continuous Improvement

1. We openly share lessons learned from security incidents to strengthen our practices.

2. Our security awareness program is continuously evolving based on current threats.

3. We benchmark our security practices against industry standards.

4. We break our training into smaller portions over a longer time, rather than sending it all at once a couple of times per year.

Employee Engagement

1. Employees actively participate in security initiatives (security campaigns, awareness exercises, etc).

2. We have an active security champion program or similar peer-to-peer security initiative.

3. Employees are recognized or rewarded for good security practices.

4. Mid-level management is fully bought in on our Security Awareness program and takes responsibility for how their team performs.

Risk Awareness

1. Employees understand the security risks specific to our organization.

2. Employees understand how their actions can either strengthen or weaken our organization's security posture.

3. Employees know how to identify and report potential security risks.

4. Employees consistently report suspicious emails or security incidents.

Integration with Business

1. Security considerations are part of our everyday business process.

2. Cybersecurity is seen as an enabler rather than a hindrance to business.

3. Security culture extends to our interactions with external partners/vendors and customers.

4. All departments in our organization work together to keep cybersecurity a focused priority.

Thank you for your submission. Your Cyber Maturity Assessment Report will be delivered to your email shortly.

Why Choose Xcitium?

Xcitium is a leader in cybersecurity, offering innovative solutions to protect against the most advanced threats. Our endpoint security platform combines cutting-edge technology with expert support, ensuring your business stays secure in a constantly evolving threat landscape. Trust Xcitium to safeguard your endpoints and protect your business.

Request a Demo

Awards & Certifications

Manage Consent Preferences

When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. This information might be about you, your preferences or your device and is mostly used to make the site work as you expect it to. The information does not usually directly identify you, but it can give you a more personalized web experience. Because we respect your right to privacy, you can choose not to allow some types of cookies. Click on the different category headings to find out more and change our default settings. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer.

Strictly Necessary

These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information.

Performance Cookies

These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies we will not know when you have visited our site, and will not be able to monitor its performance.

Functional Cookies

These cookies enable the website to provide enhanced functionality and personalisation. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function properly.

Targeting Cookies

These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information, but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.