Lets get started with your first and last name. *

First

Last

Your email address please. No, we do not send spam or sell your name ;) *

Email

Confirm Email

Your office telephone number and extension. *

Which company do you work for? *

How many users are in the employed at the company? *

Has the company done an IT Security Assessment within the last year? *

Yes
No

Great! Knowing is better than guessing. The IT Security Assessment is designed to give you an idea of where you stand from an IT Security point of view and help guide you gap areas that need to be resolved. Good to see you are proactive on that front.

This is the starting point for any company looking into Cyber Security. In order for you to know where the security gaps are, you need to know where you stand right now; a proper IT Security Assessment will help with that. Once the assessment is completed and reviewed with you, actionable items should come out of it so that you know what the next steps are.

Does your company require a Cyber Security compliance standards in order to do business? (ISO/IEC 127001:2013, CyberSecure Canada, SOC2 etc…) *

Yes
No

Excellent! Good to know!

Just because you don’t need a Cyber Security compliance standard does not mean you shouldn’t be diligent in protection your network and data against bad actors. Cyber Security is everyone’s responsibility.

Are your staff trained regularly on IT Security Risks? IE..Do you have a formal Cyber Security Awareness training program that also has simulations? *

Yes
No

Awesome - Training Employees in Cyber Security is essential. Businesses are at a higher risk than ever before of cyber-attacks. Knowing this many employees continue to disregard the policies and practices that have been put in place to safeguard your business. So constant training and education is required.

Cyber Security Awareness is everyone's responsibility. Proper Training and Education is exceptionally important. Employees should be informed on how critical it is to follow 'best security practices' as well as the IT Security guidelines that have been put in place to keep the company secure. Simulations also play an important role to ensure staff are using the knowledge they learn and put into practice to keep them and the company safe. A large majority of data breaches start FROM THE INSIDE.

Does your company have Security Policies in place like Deny/Limit USB file storage, enable enhanced passwords, set user screen timeouts, limit user access? *

Yes
Some
No

Superb! Glad to hear you have IT Security Policies in place. Be sure to monitor them closely and regularly.

You have already made a huge step by starting with some IT Security Policies. The key now is to build out the rest of the IT Security Policies to improve your Cyber Security posture.

One of the first steps to any Cyber Security posture is to ensure you have Policies in place that you can monitor and measure against; without policies to measure against, you do not know how you are doing.

Does your company use a Corporate Grade Firewall that has Unified Threat Management (UTM) and Logging on it? *

Yes
No

Perfect. Edge perimeter defence is key. Ensure the logs are looked at regularly. Unsure: Best to find out from your IT Admin/Service Provider as this is an essential aspect of Cyber Security maturity.

This is considered one of the first essential steps in Cyber Security protection.

Are employees able to visit any website they want while at work? *

Yes
No

Hmm... You should consider a Content Filter service or solution. A content filter is a crucial tool that can help prevent cyber-attacks, malicious programs, and employees from visiting bad websites that can download software to their computer.

Great. This would suggest that you have a Content Filter solution or service that restricts known bad sites or sites with bad content. This is a great step in securing your corporate network.

Are employees mobile devices monitored? *

Yes
No

Sweet! Today almost everyone has a cellphone, tablet, laptop, and many other devices that connect to and rely on an internet connection. Policies should be put in place to manage and monitor these devices. If left unchecked these devices can create a large hole in your security. Also be sure personal mobile devices are only allowed on the guest WiFi.

Uh Oh. One of the most easily penetrable device is a personal cell phone. Policies should be put in place to manage and monitor these devices. If left unchecked these devices can create a large hole in your security - especially if they are connected to your Internal Network.

Are employees using Multi-Factor Authentication? *

Yes
No

Great! Additional level of protection is always great.

Utilize Multi-Factor Authentication whenever possible (like accessing the network, banking websites, social media, Password Manager etc…) It adds an extra layer of protection to ensure your data stays protected from unauthorized access.

If disaster strikes your business, is there a plan and procedure in place that you can follow to get everything back up and running quickly? *

Yes
No

Super! A DRP (Disaster Recover Plan) could turn data loss and downtime from a devastating setback to a minor problem. Be sure to test your DRP at least once per year.

Ouch! A disaster can happen at any time - whether through theft, deletion, encryption or environmental issues. Having a Disaster Recovery Plan could turn data loss and downtime from a devastating setback to a minor problem, allowing you to get everything back up in running quickly and smoothly.

Are your backups stored in a secure offsite location and easily retrievable? *

Yes
No

Great! Be sure to test the offsite backups on a regular basis to ensure you can read the backups.

Onsite backups should always be accompanied by offsite backups. If anything happens to your backups that are stored onsite you always have the extra security and peace of mind that all your valuable data and information are also stored at an external location.

Do you have Cyber Liability Coverage? *

Yes
No

That is perfect! Be sure to go over what is included in your Cyber Liability Coverage to ensure you know precisely what is covered and what is not. You also need to know what information the Insurance company needs to process your claim properly. Best to find this out now before an attack strikes.

Cyber-attacks don’t only damage a business’s reputation, but their bank account as well. Cyber insurance can mitigate financial damage which could save your business. However, Cyber Liability Coverage should only be used as the backup's backup and not be the substitute for having properly trained staff and strict security practices.

Do your workstations receive regular operating system and software patches? *

Yes
No

Software vendors are always developing and deploying new updates and patches that are critical for protecting your business. If your PC does not have the most up to date patches they are much for vulnerable and susceptible to security breaches.

Do your workstations have Antivirus, Anti-Malware, Anti-Exploit, Anti-Ransomware software installed with real-time monitoring (EDR)? *

Yes
No

Awesome! Advanced Endpoint Detection & Response (EDR) provides great security coverage.

Advanced Endpoint Detection & Response (EDR) is a necessity when protecting workstation. You need additional protection to ensure your workstations are protected against file-less and script based threats including ransomware.

Do you require laptops to have encryption when they are taken out of the office? *

Yes
No

Most people own and work on laptops now which creates security risks in your business. One such risk is the threat of the device being stolen. Thankfully most new devices have built-in encryption that can secure any information and data on the laptop.

Are your emails protected by a spam filter with a built in Antivirus Scanner? *

Yes
No

Nice! Good spam filters should flat out block Viruses but will also block poor reputation emails / phishing emails. That being said, no system is perfect so you still have to look where the email is coming from (look at the full email address of the person sending you the email). If the email was spoofed and you are unsure it is legitimate, call them to find out, especially if they are asking for money.

Antispam filter solutions don’t just block annoying spam, it blocks annoying spam that can contain a host of various security risks. From phishing attempts to ransomware, spam email carries it all. That is why it’s having a spam filter prevents any of these attacks is very important. Even with a AntiSpam Filter solution, be diligent in what emails you open.

Do you outsource the management of your computers/network to an IT Managed Service Provider (MSP)? *

Yes
No

Fantastic! Having an MSP that can remote monitor, manage and service your computers is great. However, most MSPs do not provide Cyber Security Assessments, Monitoring, Logging, Vulnerability Scanning and Incident Management. Its best to see if your current MSP offers Cyber Security services as well. IF not, please feel free to contact NeoLore Networks Inc. We can help. (613) 594-9199 - [email protected]

OK. The IT issues are being handled internally or the company pays someone to fix the issues when they happen. Hopefully there is remote monitoring and management tools installed on the computers to help speed up problem resolution. Be to ask about Cyber Security tools for added protection.

Would you like us to reach out to you and see how they can help you improve your Cyber Security posture? *

Yes, immediately please!
No, I'm good.
Maybe in a few weeks.
Maybe in a few months.

Would you like us to email you the NeoLore Cyber Security Book? The book contains great information as well as plain-English descriptions of the Cyber Security critical controls every company should work towards implementing. *

Yes
No