CIS Controls v7 Compliance Assessment Questionnaire Form
Complete this CIS Controls v7 Compliance Assessment Questionnaire Form to evaluate your organization's readiness and implementation of key CIS security controls.
Organization Name
*
How would you rate your organization's overall awareness of CIS Controls v7?
*
1
2
3
4
5
Does your organization maintain an up-to-date inventory of all authorized devices?
*
Fully Implemented
Partially Implemented
Not Implemented
How mature are your organization's access control policies and procedures?
*
Not Documented
1
2
3
4
Fully Documented & Enforced
5
1 is Not Documented, 5 is Fully Documented & Enforced
Select the statement that best describes your organization's vulnerability management process.
*
Continuous scanning and remediation
Periodic scanning with some remediation
No formal process
Please indicate your level of implementation for the following CIS Controls:
*
Rows
Not Implemented
Partially Implemented
Fully Implemented
Inventory and Control of Software Assets
1
2
3
Audit Log Management
4
5
6
Email and Web Browser Protections
7
8
9
Incident Response and Management
10
11
12
How frequently are security awareness trainings conducted for employees?
*
Please Select
Quarterly
Annually
Rarely
Never
Rate your organization's ability to detect and respond to security incidents.
*
1
2
3
4
5
Which best describes your organization's data backup strategy?
*
Regular automated backups with offsite storage
Manual or infrequent backups
No formal backup process
Describe any major challenges or gaps your organization faces in implementing CIS Controls v7.
Submit Assessment
Should be Empty: