Average External Factors

Is any of your software deployed in clouds?

Yes
No

Does your customers PII data reside with you?

Yes
No

Do you have a cyber insurance which covers you against threats?

Yes
No
Partially Covered

Do you have work related to government employees or research?

Yes
No

Have you outsourced your infrastructure to contractors?

Yes
No
Partially Covered

Are you compliant to laws and/or standards like PCI, SOX, ISO?

Yes
No
Dont Know
Max Information Level

What is the highest level of information you are planning to assess?

Top Secret
Secret
Confidential
Restricted
Official
Unclassified
Likelihood

What is the number of systems you want to asses risk for?


What is the total number of system you have in your environment?