Company Profile Questionnaire

Company Profile Questionaire

Company Name:

Primary Contact:

Role/Position

Phone

General Infrastructure

1. Describe your current IT infrastructure. (Include information on cloud vs. on-premises environments, main operating systems, etc.)

2. How many servers do you currently have?

A. Virtual?

A. Physical?

3. Do you have public facing webservers?

A. How Many?

B. What platform(s)?

C. How are they currently being protected (CWAF, On Premise firewall, other)?

4. Is your Email system hosted on prem or in the cloud?

On-Prem

Cloud

5. What operating systems are running on your servers?

6. How many desktops and laptops are in use in your organization?

7. How many locations does your organization have?

8. How many firewalls are currently implemented?

9. What firewall makes and models are you currently using?

A. Are they in High Availability pairs?

10. How many internal VLANs do you use?

11. How many internal IP addresses are in use?

12.How many external IP addresses do you have?

A. Do you have multiple ISP connections

B. Are you using SDWAN?

13. How do you manage data storage and backups? (Include information on data centers, cloud storage solutions, backup frequency, etc.)

A. How many Terabytes are you protecting with your backups?

B. What is your current backup retention?

14. What are you currently doing for a phone system, and is it cloud based?

A. How many phones do you have?

15. What Directory Service are you using for login control (Active Directory, LDAP, other

16. What MFA/SSO system are you using (if any)?

User Base

17. How many users are currently supported by your IT infrastructure?

18. Do you have remote or off-site users? If so, what percentage of your user base do they represent?

19. How do you manage user access and permissions?

20. Approximately how many users are added and removed from your systems annually?

21. Do you currently have on-boarding and off-boarding procedures?

Ticket Volume and Support

22. On average, how many IT support tickets do you generate per month?

23. What is the common nature of these tickets? (e.g., hardware issues, software problems, access requests)?

24. How is your IT support structured? (e.g., in-house team, outsourced IT support, hybrid)

25. What tools or software do you use for ticketing and IT support management?

Security Measures

26. Describe your current IT security measures. (Include information on antivirus software, firewalls, endpoint protection, etc.)

27. How do you manage software updates and patches?

28. What measures are in place for data security and privacy compliance? (Include details on encryption, compliance standards like GDPR, HIPAA, etc.)

29. Have you conducted any security audits or assessments in the past year? If so, what were the key findings?

30. Do you have an incident response plan in place in case of a security issue?

31. Do you currently generate and review monthly security reports? If so, please share the format and sample content.

Security Solutions Assessment

32. Do you currently have an Endpoint Detection and Response (EDR) solution in place? If yes, which product or service are you using?

33. What email security solutions do you currently use? (Include spam filters, phishing attack protection, etc.)

34. Do you have a vulnerability management solution in place? If so, how frequently do you perform vulnerability scans?

35. Do you conduct regular penetration testing? If yes, how often and by whom (in-house team, external vendors)?

36. Do you use a Security Information and Event Management (SIEM) solution? If yes, which one?

37. Are there any other critical security solutions or measures in place that have not been mentioned? (e.g., Data Loss Prevention (DLP), Identity and Access Management (IAM), etc.)

Future Plans and Concerns

38. Are there any areas of your IT infrastructure you're looking to improve or upgrade in the near future?

39. What are your main IT-related concerns or challenges?

40. How do you plan to address cybersecurity threats in the upcoming year?

41. Are there any gaps in your current security solutions that you're looking to address?

42. What are your key security objectives for the upcoming year?

43. How do you stay informed about the latest security threats and solutions?

Additional Information

44. Is there any other information about your IT needs that you think is relevant?

45. Do you have HIPAA requirements?

46. Do you have PCI compliance requirements?

47. Are you audited by any 3rd party companies?

If you are human, leave this field blank.