QuickIntel Operational Resilience Assessment

Do you have clear visibility into what’s happening across your computers, servers and cloud systems?

We do not collect this information in one place
Some systems are connected, but not all
Most systems are connected and reviewed
All systems are connected and activity is regularly reviewed

Is security software installed on all company devices to detect and respond to suspicious activity?

No consistent protection on devices
Protection exists on some devices
Protection is installed across most devices
Protection is installed across all devices and regularly reviewed

Are Microsoft 365 or other cloud environments continuously monitored for suspicious activity?

Cloud systems are not actively monitored
Monitoring exists but is limited or inconsistent
Cloud activity is monitored on a structured basis
Cloud systems are continuously monitored and reviewed

Is your environment monitored 24/7 by a dedicated security team?

Systems are not actively monitored
Monitoring happens during business hours only
Monitoring covers most hours with defined oversight
Systems are monitored 24/7 with clear accountability

When a security alert happens, do you follow a documented process to investigate and escalate it?

No defined process exists
We handle alerts informally
We follow a documented process
We follow a documented process that is reviewed and updated regularly

Have you tested how your organization would respond to a cyber breach in the past 12 months?

We have never tested this
We have discussed it, but not formally tested
We tested it once in the past year
We test and review our response process regularly

Do you have email protection in place to help prevent fake or fraudulent emails from reaching your team?

No added email protections in place
Basic filtering exists
Strong protections are in place
Strong protections are in place and regularly reviewed

Do employees complete regular training on how to recognize security threats?

No formal training program
Training is occasional or optional
Training is required on a recurring basis
Training is recurring and performance is tracked

Are company passwords managed in a secure, centralized system rather than stored individually?

Passwords are managed individually
Some teams use a shared system
A centralized system is in place
A centralized system is enforced and regularly reviewed

Are your system backups automated, monitored and regularly checked to ensure they are working?

Backups are not reliable or not in place
Backups exist but are not consistently checked
Backups are automated and reviewed periodically
Backups are automated, monitored and routinely verified

Have you tested restoring important systems or data within the last 12 months?

We have not tested restoration
We are unsure if restoration would work
We tested restoration once in the past year
We test restoration regularly and document results

Are your network and cloud systems continuously monitored to ensure they stay online and run reliably?

Issues are usually discovered after disruption
Some monitoring exists but is inconsistent
Monitoring is in place for most critical systems
Monitoring is in place and actively reviewed to prevent disruption