Security Posture: High Risk

Severe vulnerabilities detected. Immediate remediation is required.

Critical Gaps (12)

• ✗ Is Two-Factor Authentication (2FA) enforced across all company accounts?
• ✗ Is there a documented offboarding procedure for terminated employees?
• ✗ Are vendor security assessments conducted annually?
• ✗ Do all employees complete mandatory security awareness training upon hire?
• ✗ Is sensitive customer data encrypted both in transit and at rest?
• ✗ Do you have an Incident Response Plan that is tested at least annually?
• ✗ Are access rights reviewed and revoked promptly when roles change?
• ✗ Is there a formal Disaster Recovery and Business Continuity Plan in place?
• ✗ Do you maintain an updated asset inventory for all hardware and software?
• ✗ Are system logs centrally collected, monitored, and retained for 90+ days?
• ✗ Are password policies enforced (e.g., minimum length, complexity)?
• ✗ Is there a formal change management process for deploying code to production?

Compliant Areas (0)