IT Identity Security Assessment Questionnaire
Use this form to assess your organization's identity security controls, authentication practices, privileged access handling, monitoring readiness, and follow-up needs.
Assessment Scope and Environment
Organization name
*
Primary IT contact role/title
*
Environment type
*
On-premises
Cloud
Hybrid
Multi-cloud
Other
If other, please specify the environment type
Number of users covered by identity systems
*
Identity platforms in use
Active Directory
Entra ID
Okta
Ping Identity
Google Workspace
AWS IAM Identity Center
OneLogin
CyberArk Identity
Other
Identity Access Practices
Identity lifecycle and access control practices
*
Rows
Not Implemented
Partially Implemented
Implemented
Optimized
Account provisioning
1
2
3
4
Account deprovisioning
5
6
7
8
Access reviews
9
10
11
12
Role-based access control
13
14
15
16
Privileged access management
17
18
19
20
MFA enforcement
21
22
23
24
Password policy
25
26
27
28
Session timeout
29
30
31
32
Overall access governance maturity
*
1
2
3
4
5
Authentication and Privileged Access
MFA methods in use
*
Authenticator app
Hardware security key
SMS or voice code
Email code
Push approval
Backup codes
Other
Privileged account management approach
*
Dedicated admin accounts with separation of duties
Privileged access management tool
Just-in-time elevation
Shared admin accounts
Manual approval process
Other
Authentication strength
*
Weak
1
2
3
4
5
6
7
8
9
Strong
10
1 is Weak, 10 is Strong
Notable exceptions or legacy constraints
Monitoring, Incident Readiness, and Follow-up
Identity logging coverage
*
Comprehensive logging for all identity events
Logging for critical events only
Limited logging in place
No formal identity logging
Other
Incident response readiness
*
Not ready
1
2
3
4
5
6
7
8
9
Fully ready
10
1 is Not ready, 10 is Fully ready
Key identity risks, gaps, or remediation notes
Preferred follow-up action
*
Review results
Request recommendations
Schedule a workshop
Contact me with findings
Other
Submit Assessment
Should be Empty: