Information Security Management System Effectiveness Assessment Form
Assess how effectively your information security management practices are working.
Rate the effectiveness of each area
*
Rows
Effectiveness
Information security policy and objectives
1
Risk assessment and treatment
2
Implementation of security controls
3
Incident detection and response
4
Workforce awareness and training
5
Monitoring, measurement, and review
6
Continual improvement
7
How well are information security risks identified and reviewed?
*
Not well at all
1
2
3
4
Extremely well
5
1 is Not well at all, 5 is Extremely well
How effective is the organization’s incident response process?
*
Not effective
1
2
3
4
Very effective
5
1 is Not effective, 5 is Very effective
How consistently are information security responsibilities understood across the organization?
*
Not consistently
1
2
3
4
Very consistently
5
1 is Not consistently, 5 is Very consistently
Overall, how effective is the Information Security Management System?
*
1
2
3
4
5
Which areas should be prioritized for improvement?
*
Policy and objectives
Risk assessment and treatment
Security controls
Incident response
Awareness and training
Monitoring and review
Continual improvement
Other
What is working particularly well in the Information Security Management System?
What is the most important improvement to make next?
Submit Assessment
Should be Empty: