Integrated Security Management Assessment Form
Please provide an overview of your organization's current security management practices and priorities. Complete all sections for a thorough assessment.
Organization and Security Context
*
Please Select
Corporate
Government/Public Sector
Education
Nonprofit
Healthcare (non-HIPAA)
Other
Scope of Assessment
*
Entire Organization
Department/Business Unit
Specific Project or System
Current Security Goals (select main focus)
*
Threat Prevention
Risk Reduction
Regulatory Compliance
Operational Continuity
Incident Detection/Response
Other
Existing Security Controls
*
Rows
Not Implemented
Partially Implemented
Fully Implemented
Firewall/Network Segmentation
1
2
3
Endpoint Protection
4
5
6
Data Encryption
7
8
9
User Awareness Training
10
11
12
Physical Security
13
14
15
Primary Risk Areas
*
Cyber Attacks
Insider Threats
Physical Intrusion
Data Loss/Leakage
Compliance Violations
Other
Incident Response Readiness
*
1
2
3
4
5
Monitoring & Alerting Maturity
*
Ad hoc/Manual
1
2
3
4
Automated/Continuous
5
1 is Ad hoc/Manual, 5 is Automated/Continuous
Access Control Maturity
*
Basic/Manual
1
2
3
4
Advanced/Automated
5
1 is Basic/Manual, 5 is Advanced/Automated
Compliance & Frameworks in Use
*
ISO 27001/2
NIST CSF
GDPR
PCI DSS
None
Other
Overall Priority for Security Improvement
*
High
Medium
Low
Submit Assessment
Should be Empty: