Free
Instant analysis

Our new online check gives you an immediate first impression of your company's IT security.

Preparation status

Identification

Containment measures

Elimination

Recovery

Is there a written policy for managing all types of security incidents?

Yes! We have a comprehensive emergency preparedness concept for the proper handling of cyber security incidents, which is updated annually.

Yes, the concept is old and we've had a technology change in our servers in the meantime, but it doesn't change that much.

No. This is on the system administrator's TODO list.

Yes, we are top positioned! Valuable tips like "Don't write passwords on Post-Its!" are on our notice board.

Do you conduct regular security awareness training?

Yes! Phishing emails are continuously generated and all employees, without exception, are regularly trained on the topic of IT security.

Yes! Once a year, all employees are instructed and must sign that they have been informed about the risks.

Yes! On the notice board are all the rules of etiquette in connection with our EDP and this must be observed by all employees.

Training is not necessary. Our employees are all highly sensitised, know the problems of IT security and know what they are doing!

Would you recognize an attack on your IT if it happened?

Sure! Our perimeter protection is protected by an IDS/IPS system, our own Security Operation Centre immediately alerts us to suspicious network activity -- and we also analyse this activity.

We are well positioned. The logs of our security appliances are regularly evaluated by a security service provider and we are informed of any suspicious traffic.

Of course! Our system administrator in a secondary function checks the logs of our firewall for anomalies every few weeks.

Yes, we are in a top position. An acquaintance of the company has configured our firewall so securely that we don't have to worry.

Are you able to contain and defend against an acute attack?

Yes! Our dedicated security team is able to isolate all critical systems in a targeted manner, cut the connections to the Internet, disconnect network segments at any time and prevent further infection of the network.

Yes, we are well positioned. If in doubt, the IT team can switch off the network and then use manual troubleshooting to check each server individually for malware and malicious software.

It works. The question is how our IT guys get rid of the intruder. We can't just disconnect the company network from the internet, our boss has to read and send emails every day.

Yes, we are in a top position! The little nephew of the secretary of the managing director recognises something like that immediately. He's a total nerd. Or geek. In any case, he's a total IT crack.

Are you able to completely drive the attacker out of your systems after an averted attack?

Yes! Our IT security team can investigate the incident and implement measures to eliminate entry points and vulnerabilities. We can also monitor sensitive system areas and break encrypted connections.

Yes, but we have to do it with some system administrators from the internal IT department, i.e. without specific IT security expertise.

Not really. We have a system administrator who does that in a secondary function when the time comes.

Yes, we are in a top position! The nephew of the managing director's secretary does that for us when he comes home from school. The young people know a lot more about it.

Are you able to restore your IT landscape after an attack has been eliminated and safely resume productive operations?

Yes! We have a dedicated IT team, clear functional responsibilities, a detailed recovery procedure plan and multi-level backups to reconstruct the data.

Yes, it is. That's what the IT team does for us. We don't have recovery plans, but they are smart people.

Not really. We have a system administrator who does that in a secondary function when the time comes.

Yes, we are in a top position! The nephew of the managing director's secretary does that for us when he comes home from school. He is - as I said - a total nerd.

Minimal

You have a real problem. Not only do you have no IT security at all in your company, you also weigh yourself in a false sense of security that nothing will happen! Urgent need for action!

Sprechen Sie uns an