AI Readiness - Storm AI

Please enable JavaScript in your browser to complete this form.

This section covers a few questions we would like you to ask during the interview portion of the analysis. This can either be performed in person or over a teams / zoom or gotomeeting.

What type of sensitive information does your team handle? Select all that apply. *

Personal data
Employment data
Credit card numbers
Healthcare information
Intellectual property
Social security numbers
Driver’s license numbers
Banking / investment data
Medical records or history
Unsure

Do you allow any of the above information to be emailed? *

Not Applicable
Yes
No
Unsure

Do you allow any of the above information to be stored or transmitted in cloud filesharing apps like Dropbox or Google Drive? *

Not Applicable
Yes
No
Unsure

The following questions should be asked if the organization uses Microsoft 365.

Do you use Microsoft 365 for email or file storage?

When you log in are you prompted for a code on your phone that is sent to your cell phone or shows up on an application on your cell phone?

Not Applicable
Sometimes
Always
Never

Once logged into Microsoft 365 do you have an 'Admin' application? It is a little A with a gear next to it. (You may want to have them log in and inspect. You are looking to see if they have Administrative access with the account they use daily.)

Not Applicable
Yes
No

If they do have administrative access, check to see if they have two factor properly enabled. Verify that their provider has two factor enabled. Check to see if there are any accounts for backup services. Provide any relevant notes here. We will include them in the report.

This section covers questions that should be asked about their backups.

Does your IT provider give evidence that they perform test restores of your data?

Daily
Weekly
Monthly
Quarterly
Annually
Never
Not Applicable

The following questions should be asked about their current training program.

sign we organization

How often does your team receive simulated phishing training?

Weekly
Monthly
Quarterly
Annually
Never
Not Applicable

How often does your team receive security training?

Monthly
Quarterly
Annually
Never
Not Applicable

The following questions should be asked about their current insurance policies.

Do you have a cyber liability insurance policy?

Not Applicable
Yes
No
Unsure

Do you have crime insurance policy?

Not Applicable
Yes
No
Unsure

How recently have you evaluated the level of cyber insurance carried by your organization to verify if it is adequate to protect your organization and your clients or patients from financial loss?

I Don’t Know
90 Days
180 Days
1 Year
3 Years

The following questions should be asked about their current office policies.

Do you have a work from home policy that includes safeguards for client, patient, and organization data?

Not Applicable
Yes
No

Do you have a "clean desk" policy asking employees to not leave sensitive documents lying on their desk when unattended?

Not Applicable
Yes
No
Unsure

What cyber security policies are being used in your office?

Acceptable Use Policy

Password Policy

Data Confidentiality Policy

Mobile Device Policy

Bring Your Own Device (BYOD) Policy

Incident Response Policy

Backup and Disaster Recovery Plan

Business Continuity Plan

Remote Access Policy

IT Asset Disposal Policy

Security Awareness Policy

3rd-Party Access Policy

Removable Media Policy (USB Drives/Sticks)

User Termination Policy

I don't know if we have any of these

Do employees sign off that they have read and understand these policies?

Not Applicable
Yes
No
Unsure

Where do you store your list of user credentials (username and passwords)?

How would you currently rate the cyber security software deployed to protect personal and organization data from attacks such as phishing and ransomware?

Poor
Below Average
Average
Good
Excellent

How often do you have a 3rd party analysis of your network security controls?

Never
Monthly
Quarterly
Annually
Biannually