Network Security Assessment Guide
Score your security posture across the domains that matter most for mid-market businesses, and walk away with a ranked list of what to fix first.
Rings Jonathan and the team 24x7.
400+ carriers and platforms, compared.
What this is
A structured self-assessment you can run in one sitting. For each question you mark Yes, Partial, or No. Yes means fully in place. Partial means somebody started it. No means it is a gap.
Use the results to prioritize remediation and to have an informed conversation with whoever advises you on security - us or anyone else.
What is inside
The assessment walks the domains where mid-market gaps actually appear.
- Perimeter and firewall security - NGFW capability, firmware currency, and annual ruleset review.
- Identity and access management - MFA on email, VPN, and cloud apps, plus offboarding and least privilege.
- Network architecture and segmentation - how far an attacker can move once inside.
- Endpoint and email protection - EDR coverage and inbound filtering.
- Monitoring, logging, and response - who is watching and what happens at 2am.
- Backup, recovery, and documentation - what you can actually restore, and how fast.
- Each question is flagged High Risk or Medium Risk so you know what to fix first.
Three questions that catch most companies
If you only answer three, make it these.
Is MFA enforced on email, VPN, and cloud apps?
MFA is the first thing every cyber-insurance questionnaire asks about, and the control most often missing. The widely quoted 99.9% figure comes from a 2019 Microsoft post about automated attacks and is disputed - but the underlying point holds. If MFA is not enforced on Microsoft 365, Google Workspace, or VPN access, one phished password reaches everything.
Has firewall firmware been updated in the last 90 days?
Unpatched firewall firmware is one of the most common ways in. Vendors release security patches regularly, and outdated firmware leaves known holes on your perimeter.
Is there a formal offboarding process?
Former employee accounts left active are a persistent gap. Immediate credential revocation across email, VPN, cloud apps, and network belongs on a written checklist.
How to use your score
Answer honestly
Partial is not a failing grade. It is the most useful answer in the whole assessment, because it tells you where work already started and stalled.
Sort by risk flag
Fix the High Risk gaps first regardless of how easy the Medium Risk ones look. Effort follows exposure.
Bring it to your renewal
Take the completed assessment into your next cyber insurance renewal or MSP review. It changes the conversation from opinions to a list.
Related
Free tools to use before your next renewal
Practical, fillable tools from a 23-year independent technology advisor. Use them yourself, or have us ru...
Read →HIPAA compliance in OhioHIPAA Compliance for Ohio Healthcare Organizations
Most Ohio healthcare organizations have the administrative policies. The technical safeguards on the phone sys...
Read →SOC 2 readiness in OhioSOC 2 Type II Compliance for Ohio Organizations
Enterprise customers and investors ask for Type II. We coordinate the network infrastructure controls your aud...
Read →Want us to score it with you?
Send the completed assessment and we will return written findings - free, independent, and the owner reads every one.
Book a call