Quark Sentry

Quark Sentry Security Audit

First Name*

Last Name*

Email*

Company*

What type of business do you operate, and what are your primary products or services?*

Do you have any compliance requirements or industry-specific regulations related to information security?*

Have you experienced any security incidents or breaches in the past, and if so, what were the impacts?*

Are there any Infosec-related policies and procedures in place?*

Are the information security policies documented and easily accessible to all employees?*

Are there any processes to ensure that employees know and understand the information security policies?*

Is there a process to handle exceptions to information security policies?*

Is there a process for communicating information security policies to external parties or third-party contractors?*

Is there any annual security training in place?*

Is there a credential policy in place for credential maintenance?*

Is there a process to grant, review and revoke access?*

Are there specific access control mechanisms for critical systems and sensitive data?*

Are access rights and permissions reviewed for appropriateness periodically?*

Are there any measures in place to prevent unauthorised access to systems and data?*

Are there controls in place to monitor and log user access activities?*

Are there any security control mechanisms adapted for remote and mobile users? E.g. VPN*

Is there a process to manage privileged access?*

Are there any access control mechanisms in place?*