cra - Falcon System

Welcome to your Cybersecurity Risk Assessment Quiz

Which statement best describes your organization's MFA implementation?

MFA is enforced across all systems, applications, and admin accounts

MFA is enabled for most critical systems and cloud applications

MFA is used for some systems but not consistently enforced

MFA is only used for a few applications or by select users

We don't use MFA or aren't sure what systems have it

How often does your team receive formal cybersecurity training?

Monthly interactive training with phishing simulations and compliance updates

Quarterly training sessions covering current threats and best practices

Annual training or onboarding-only security education

Informal security reminders or outdated training materials

No formal cybersecurity training program exists

Endpoint Detection & Response (EDR)

Advanced EDR with 24/7 threat hunting and automated response

EDR solution with some monitoring and manual incident response

Next-gen antivirus with basic behavioral detection

Traditional antivirus with signature-based protection only

Basic or outdated antivirus, or unsure of current protection level

When did you last successfully test a full system restore from backup?

Within the last 30 days with documented procedures and verified integrity

Within the last quarter with mostly successful results

Within the last 6 months, but some issues were discovered

Over 6 months ago or testing revealed significant problems

We've never tested full recovery or aren't sure if backups actually work

How well do you understand your cyber insurance policy details?

Comprehensive coverage with clear incident response procedures and verified compatibility

Good coverage with basic understanding of claims process and requirements

Standard policy but unclear on specific coverage limits or exclusions

Basic coverage with limited understanding of what's actually covered

No cyber insurance or completely unfamiliar with policy terms

Which best describes your compliance posture for applicable regulations (PIPEDA, HIPAA, GDPR, etc.)?

Fully compliant with regular audits, documentation, and continuous monitoring

Mostly compliant with established procedures and periodic reviews

Working toward compliance but some gaps remain

Unclear on requirements or significant compliance gaps exist

Not actively managing compliance or unsure what regulations apply

How do you manage unauthorized applications and personal devices?

Comprehensive inventory with MDM, application whitelisting, and usage policies

Regular audits of applications and devices with established approval processes

Basic awareness of shadow IT with some monitoring in place

Limited visibility into unauthorized applications or personal device usage

No formal process for managing shadow IT or BYOD

What's your approach to password security and credential monitoring?

Enterprise password manager with dark web monitoring and breach notifications

Password manager in use with some credential monitoring capabilities

Basic password policies but inconsistent password manager adoption

Weak password policies with minimal monitoring of compromised credentials

No centralized password management or credential monitoring

How do you manage administrative and privileged account access?

Full PAM solution with automated rotation, session recording, and just-in-time access

Privileged accounts managed with regular rotation and access controls

Some privileged account management but inconsistent rotation policies

Basic admin account controls with infrequent password changes

Shared admin accounts or no formal privileged access management

Name

Email

Company

Phone

Cybersecurity

Managed IT

Microsoft 365

AI Automation

VOIP

A la carte services

LatestBLOG

Celebrating Cybersecurity Awareness Month: 10 Ways to Get Involved This October