Are following physical security controls in place to securely protect data?
1. Security alarm system
2. Mounted camera at points of entry
3. Badge/biometric readers/ locked doors with keypads on all entry points

Do you have a process for communicating security breaches to on occurrence?

Do you have a information security awareness training program in place?

Do you have the following endpoint security controls in place for protection of data:

1. Regular patch updates
2. Anti-Malware software with current signatures
3. Device encryption
4. Administrative privileges disabled

Do you have the following network security controls in place for protection of data:

1. Firewall
2. Regular monitoring of network traffic logs

Are all personnel (e.g., full/part-time/ contractual/third party) required to sign the following documents?
1. NDA or confidentiality agreement
2. Code of Conduct

Are following physical security controls in place to protect data?
1. Security alarm system
2. Mounted camera at points of entry
3. Badge/biometric readers/ locked doors with keypads on all entry points