How are admin passwords on your router and network devices managed? 1. How are admin passwords on your router and network devices managed?
We are not sure; they may still be the defaults. The main router password was changed, but other devices have not been checked. Default passwords are changed on all network devices and stored securely by a named owner.
How are firmware updates handled for your router and firewall? 2. How are firmware updates handled for your router and firewall?
Nobody checks; the devices are left as installed. Updates are applied occasionally when someone remembers. A named owner checks firmware regularly and old unsupported devices are planned for replacement.
How are guests and personal devices kept apart from business systems? 3. How are guests and personal devices kept apart from business systems?
Everyone uses one Wi-Fi network, including customers and billing devices. A guest network exists but some business devices or staff phones use it inconsistently. Guests and personal phones use a separate network, and billing, payment and CCTV devices stay on the business network.
How is remote access to office systems controlled? 4. How is remote access to office systems controlled?
Remote access is set up informally, possibly with shared logins or exposed remote desktop. Remote access uses an approved tool, but MFA or regular review is missing. Remote access uses a reviewed method with MFA, individual accounts and regular removal of unused access.
Is there a documented owner for the key control in this chapter? 5. Is there a documented owner for the key control in this chapter?
No / unknown Partially / informal Yes, documented and reviewed
Can the organisation provide current evidence that the control works? 6. Can the organisation provide current evidence that the control works?
No evidence Some evidence, not routinely checked Current evidence is reviewed
Are weaknesses tracked to an owner and target date? 7. Are weaknesses tracked to an owner and target date?
No consistent process Sometimes Yes, tracked to closure
Do employees know how to report a concern or incident? 8. Do employees know how to report a concern or incident?
No clear route Some employees know Clear route is communicated
Is this topic reviewed regularly and after significant changes? 9. Is this topic reviewed regularly and after significant changes?
Never / rarely Only after a problem Yes, with recorded review
See my result 0 of 9 answered