Online Security Assessment | VARS Corporation

Contact Us

English
Français

Security Products
About Us
Ressources
FAQs

1 888 607-VARS Request a demo

Request a demo

Security Products
About us
Ressources
FAQs
Contact us

Follow us

English
Français

ONLINE SECURITY ASSESSMENT

Upgrade to high-level cybersecurity

Find out how VARS can help you identify and correct your cybersecurity vulnerabilities, in order to better protect your business against digital threats.

Take advantage of a personalized consultation with one of our virtual CISO experts for tailored recommendations.

How does it work?

Complete the questionnaire (only 20 mins)
Submit your answers confidentially
Receive a free consultation with recommendations

"*" indicates required fields

Step 1 of 9 – Information Security Governance / Risk Management:

11%

Information Security Governance / Risk Management:

1.What is your industry?

2. How many employees does your organization have?

3. Do you have a dedicated information security and cybersecurity budget?

Yes

No

4. Does your organization have a Chief Information Security Officer (CISO) or dedicated leadership resource responsible for information security?

Yes

No

5. How many dedicated information security resources does your organization have?

6. Are their roles and responsibilities clearly defined?

Yes

No

N/A

7. Does your organization have an information security strategy?

Yes

No

8. Does your information security strategy align with the business goals and mission?

Yes

No

9. Does your organization have documented, approved and executed information security policy?

Yes

No

Overall culture around cybersecurity and security awareness:

10. Are the board of directors and/or executive leadership team aware of information security risks?

Yes

No

11. Do they participate in information security activities?

Yes

No

N/A

12. Is there a cybersecurity awareness program in place?

Yes

No

13. Does your company have a strategy around information security awareness?

Yes

No

N/A

14. Does your company have a strategy around phishing simulation and social engineering testing?

Yes

No

Application Security:

15. Do you currently have web applications in your organization?

Yes

No

16. Has your organization conducted application security testing in the past 12 months?

Yes

No

N/A

17. Is security embedded into your application development life cycle / SDLC?

Yes

No

N/A

Infrastructure Security:

18. Does your organization ensure all devices that store or process sensitive information at a minimum have access control and anti-malware in place and up to date?

Yes

No

19. Does your organization have a strategy and solution in place to detect, prevent and mitigate malicious communications and activities?

Yes

No

20. Does your organization have a data classification policy in place and are sensitive data appropriately protected?

Yes

No

21. Has your organization conducted a network penetration test or cyber security assessment in the past 12 months?

Yes

No

Incident Response / Cyber Resilience:

22. Does your organization have an incident response plan and process in place?

Yes

No

23. Does your organization periodically test the incident response plan and process in place?

Yes

No

24. Do you have the capability detect, respond, remediate and recover from a cyber security incident?

Yes

No

25. Do you have adequate visibility into your network / Is the networking being monitored?

Yes

No

26. Do you have a business continuity plan?

Yes

No

27. Is information security embedded in your business continuity plan?

Yes

No

N/A

Vulnerability Management:

28. Do you have a vulnerability Management program?

Yes

No

29. Are you up to date with patch management?

Yes

No

30. Does your organization regularly scan your environment for vulnerability?

Yes

No

30. Does your organization regularly scan your environment for vulnerability?

Yes

No

31. Does your organization have a remediation policy/plans for vulnerabilities?

Yes

No

Regulatory Compliance:

32. Does your organization have to comply with regulations (SOX, PCI, HIPAA, and FISMA)?

Yes

No

Third Party Management:

33. Does your organization have a third party risk management program in place?

Yes

No

34. Does your organization protect sensitive information received from a third-parties during transmission and at rest (i.e. Encryption, SSL/TLS connections)?

Yes

No

35. Does your organization ensure all third parties are protecting your sensitive information?

Yes

No

Please fill this form to get your results

First Name*

Last Name*

Title*

Phone*

Email*

Company*

Country*

Province/State

Security

Protect your business
with ease

Join over 1,200 companies that already trust us.

Request a demo

Your security is our top priority 24/7

Speak directly with our cybersecurity experts today.

1 888 607-VARS (8277)

a division of Raymond Chabot Grant Thornton

Follow us

English
Français