Who controls your domain registrar and DNS accounts? 1. Who controls your domain registrar and DNS accounts?
We are not sure, or they are in a former designer’s or employee’s name. The business controls them, but MFA or registrar lock is not set up. They are under a business-controlled email with MFA, limited named admins and registrar lock where available.
How is your domain renewal managed? 2. How is your domain renewal managed?
Nobody is sure when it renews or who pays. Someone usually remembers, but the date and owner are not written down. A named person owns renewal, the date is recorded and auto-renewal or a reminder is in place.
How are your website software and admin accounts maintained? 3. How are your website software and admin accounts maintained?
Updates and admin accounts are rarely or never reviewed. Updates happen sometimes, but unused plugins and old admin accounts remain. Updates are applied regularly, unused plugins are removed and admin users are reviewed every few months.
How confident are you that you could restore your website after a problem? 4. How confident are you that you could restore your website after a problem?
We have no backups that we know of. Backups exist, but we have never tested a restore. Backups are stored separately and a restore has been tested within the last year.
Is there a documented owner for the key control in this chapter? 5. Is there a documented owner for the key control in this chapter?
No / unknown Partially / informal Yes, documented and reviewed
Can the organisation provide current evidence that the control works? 6. Can the organisation provide current evidence that the control works?
No evidence Some evidence, not routinely checked Current evidence is reviewed
Are weaknesses tracked to an owner and target date? 7. Are weaknesses tracked to an owner and target date?
No consistent process Sometimes Yes, tracked to closure
Do employees know how to report a concern or incident? 8. Do employees know how to report a concern or incident?
No clear route Some employees know Clear route is communicated
Is this topic reviewed regularly and after significant changes? 9. Is this topic reviewed regularly and after significant changes?
Never / rarely Only after a problem Yes, with recorded review
See my result 0 of 9 answered