Industries
Banking & Insurance

Energy

Telecoms

Not for profit (NGOs & CBOs)

Retail & FMCG

Healthcare

Transport & Construction

Education

Hospitality

Manufacturing

SMEs

Social & Public Sectors

Agribusiness

Transport & Tourism

Media & Entertainment
Capabilities
summitADVISORY

Business Intelligence & Data Analytics

Revenue Assurance

Resilience & Recovery Strategy

Strategy Execution Support

Business Continuity & Risk Management

Board Services

Executive Training

summitFORENSICS

summitANTI-FRAUD (Fraud Risk Preparedness)

Forensics Training & Support

summitINVESTIGATOR (Reactive/Postmortem)

Proactive analytics

summitSECURITY

summitPENTEST (Compliance & IT Governance Reviews)

summitSeaaS (Security as a Service)

summitPERIMETER

Pentest Questionnaire
sclDIGITAL
Julisha Feedback System

actionTEAM GRC

mentorshipFORUM

Online Training

Web Development & Maintenance

Hosting & Maintenance

casePROFILER
Tools
Testimonials

#WinningMindSpark Insights

summitSURVEYS

summitTORs

Articles & Insights

summitRFP

Book Appointment

Staff Mail
Careers
About
About Us

Our Team

Our Clients

Contact Us

Book Appointment

Staff Mail

Cybersecurity

Survey Questionnaire 2020

As many organizations start mainstreaming remote working, while investing more in platform solutions and digital delivery channels, the risk of cyber crime has increased. Take a few minutes and take our 10 questions Cybersec survey.

It is fast, confidential and you will get a copy of the results, if you provide your email at the end.

TAKE A SURVEY

Survey Questionnaire 2020

Has your organisation lost money to cybercrime incident in the last 12 months? *

How much was lost per incident?

10 million or less
50 million or less
100 million or less
More than 100 million

What were the steps that your organization took in response to the cyber attack incident? *

Did nothing, kept silent and accepted the loss
Reported the data breach to the law authorities, including Police
Performed a Business Impact Analysis and assessed the level at which the attack affected the business
Commissioned cyber incident response procedures to limit the damage.

Is your IT security team specifically for threat intelligence and analysis in-house or outsourced? *

Inhouse
Outsourced

Which of the following are the common threats and attack vectors to your cybersecurity setup (tick all that apply)? *

Weak and or compromised credentials
Malicious insiders and or former employees and service providers
Missing or poor encryption
Misconfiguration
Ransomware
Social engineering including phishing
Trust relationships
Technical vulnerabilities including zero-day exploits, trojans, cross-site scripting, session high jacking and man-in-the-middle

Tick all that apply

How frequently do you test (both internally and externally) the operating effectiveness of the controls implemented in key applications and databases? *

Daily
Weekly
Monthly
Quarterly
Annually
Once in two years

How do you assess the data integrity, completeness, and accuracy of your business transactions and records for revenue assurance? *

Through applications system reviews (both core and other systems) by the IT and or internal audit team on-going
Through penetration testing and security assessments of all systems by independent security assessors once a year
No assessment of data integrity, completeness and accuracy of business transactions and records for revenue assurance is done
Through daily/weekly transaction reconciliations by the Finance and IT team, which are also reviewed by the Internal Audit team.

Does your organization have cybersecurity insurance? *

Yes, we have a cybersecurity insurance policy that has been adequately reviewed for adequacy
No. There is not a cybersecurity insurance policy that I know of

What would you say are the top two risks related to cybersecurity that your organization faces? *

The proliferation of BYOD and smart devices
Cloud computing and attendant risks
Outsourcing of critical business processes to a third party (and lack of controls around third-party services)
Lack of IT Disaster Recovery and Business Continuity Plans.
Advanced persistent threats