testinf forms | Genisys

Essential Eight Level 1 Basic Assessment

Name

Phone/Mobile

1) Application control

Is the execution of various files prevented on workstations from standard user profiles and temporary folders?

Yes

2) Patch applications

Is a vulnerability scanner used daily to identify missing patches in internet-facing services and bi-weekly to uncover missing patches in office suites, browsers, email clients, PDF software, and security products?

Yes

Are internet-facing service vulnerability patches applied within two weeks or 48 hours with an exploit?

Yes

3) Configure Microsoft Office macro settings

Are Microsoft Office macros disabled for users without a specific business need and blocked for macros from internet-originated files?

Yes

Is antivirus scanning enabled for Microsoft Office macros and can users change macro security settings?

Yes

4) User application hardening

Do web browsers process Java and web advertisements from the internet?

Yes

Does Internet Explorer 11 process content from the internet and allow users to change web browser security settings?

Yes

5) Restrict administrative privileges

Do privileged users use separate operating environments for privilege and non-privilege tasks, and are non-privileged accounts prevented from accessing privileged operating environments?

Yes

Are initial requests for privileged access validated and are privileged accounts (excluding privileged service accounts) blocked from internet, email, and web services?

Yes

6) Patch operating systems

Are patches for internet-facing service OS applied within two weeks or 48 hours for exploits, and are patches for workstation, server, and network device OS applied within a month?

Yes

Is a daily vulnerability scan used for missing patches in internet-facing service OS, and is a bi-weekly vulnerability scan used for missing patches in workstation, server, and network device OS?

Yes

7) Multi-factor authentication

Do users use multi-factor authentication for their organisation's internet-facing services?

Yes

Do users use multi-factor authentication for both third-party services handling sensitive data and non-sensitive data (if available)?

Yes

8) Regular backups

Are backups of important data, software, and settings securely stored, maintained, and tested for restoration to a common point in time during disaster recovery exercises?

Yes

Can unprivileged accounts access or modify backups belonging to other accounts?

Yes

Managed Infrastructure

Microsoft Support

Managed Security

Projects & Consulting

IT Service Desk

Staffing Services

On-site & Field Support

Warehouse & Depot Services

Managed Cloud Services

Virtual Desktop

Migrations & Consulting

Managed Security Operations

Threat Intelligence

Audits and Consulting