IT Maturity Questionnaire

1. Do you have a written IT security policy?

2. Have you designated a person responsible for cybersecurity?

3. Do you conduct a risk assessment at least once a year?

4. Do you have an onboarding and offboarding policy for employees?

5. Do you have a policy governing employees' use of digital tools?

6. Do you use multi-factor authentication (MFA) on all software?

7. Are passwords complex and changed regularly?

8. Do you limit access to sensitive data based on role?

9. Is your data backed up regularly?

10. Have you tested a restoration in the last 12 months?

11. Are backups stored in a secure location in Canada?

12. Are you providing cybersecurity training this year?

13. Can your employees recognize a phishing email?

14. Do you have an incident response procedure?

15. Do you use up-to-date antivirus on all devices?

16. Do you have a firewall or network filtering solution?

17. Do you have an intrusion detection/suspicious behavior solution?

18. Are OS and software updated regularly?

19. Is your firewall license valid and up to date?

20. Do you have a guest Wi-Fi network?

21. Is the guest Wi-Fi segmented from the internal network?