CYBER SECURITY ASSESSMENT

Company* Registered Office* Website* Name and Surname compiler*

Activity carried out (Please describe the main activities of the company)* Does the company provide critical IT services (malfunction can cause damage to people and / or the surrounding environment) to third party companies or individuals? * YESNO Is the Head of Information Systems, Network and Data Security present in the structure of the company? * YESNO

Does the company confirm that it operates in compliance with the legislation on Privacy and the processing of personal data? * YESNO Has the company adopted a written procedure for the processing, protection and confidentiality of personal data? * YESNO Does the company obtain written consent from individuals before processing and/or sharing their personal information with third parties? * YESNO Are employees who process sensitive data provided training in the field of data protection (classroom sessions, courses or updates on behaviors to be adopted or not, on possible threats, etc.)? * YESNO

Does the company have a policy in place that covers all or part of the risks on Cyber Security? * YESNO
Are damages to third parties included and for what coverage? YESNO

Have there been incidents on computer security and/or privacy in the last 3 years? * YESNO Have there been any claims in the past as a result of a cyber incident? * YESNO Is all data backed up electronically by the company and/or any IT Service Providers? * YESNO
How often? * Are they stored in a separate location? YESNO
Has the company implemented firewalls to protect connected devices? * YESNO
What kind of firewall? *
Has the company installed antivirus software on all company devices? * YESNO
What kind of antivirus? *
Does the company confirm that the computer system of the company / professional studio adopts an operating system (Microsoft Windows, Apple Mac OS, Linux, etc) subject to periodic updating by the licensed software houses? * YESNO Is access to the corporate network and critical systems protected by passwords renewed at least quarterly and is an access control policy implemented? * YESNO Does the company have IT certifications and/or ISO? * YESNO
Indicate which
Does the company periodically carry out awareness campaigns towards all staff? * YESNO

Additional cybersecurity information you want to communicate to DRASS (optional field) By clicking the SEND button, you accept our privacy policy