Security Functions Evaluation Form
Assess security function coverage and effectiveness across a system, service, or organizational environment.
Evaluator name
*
First Name
Last Name
Evaluator role or team
*
Evaluation date
*
 -
Month
 -
Day
Year
2 digit month, 2 digit day, 4 digit year
Date
System or service being evaluated
*
Deployment context
*
Cloud
On-premises
Hybrid
Managed or third-party service
Other
Security functions assessed
*
Identity and access control
Authentication
Encryption
Logging and monitoring
Vulnerability management
Incident detection and response
Backup and recovery
Other
Rate the coverage and effectiveness of each assessed function
*
Rows
Effectiveness
Coverage
Identity and access control
Not assessed
Ineffective
Partially effective
Mostly effective
Effective
Not assessed
Not covered
Limited
Partial
Broad
Comprehensive
Authentication
Not assessed
Ineffective
Partially effective
Mostly effective
Effective
Not assessed
Not covered
Limited
Partial
Broad
Comprehensive
Encryption
Not assessed
Ineffective
Partially effective
Mostly effective
Effective
Not assessed
Not covered
Limited
Partial
Broad
Comprehensive
Logging and monitoring
Not assessed
Ineffective
Partially effective
Mostly effective
Effective
Not assessed
Not covered
Limited
Partial
Broad
Comprehensive
Vulnerability management
Not assessed
Ineffective
Partially effective
Mostly effective
Effective
Not assessed
Not covered
Limited
Partial
Broad
Comprehensive
Incident detection and response
Not assessed
Ineffective
Partially effective
Mostly effective
Effective
Not assessed
Not covered
Limited
Partial
Broad
Comprehensive
Backup and recovery
Not assessed
Ineffective
Partially effective
Mostly effective
Effective
Not assessed
Not covered
Limited
Partial
Broad
Comprehensive
Other assessed function
Not assessed
Ineffective
Partially effective
Mostly effective
Effective
Not assessed
Not covered
Limited
Partial
Broad
Comprehensive
Evidence and observations
Highest-priority gaps or risks
Overall evaluation and recommended next step
*
Submit Evaluation
Should be Empty: