Cybersecurity Status & Quote Request Form

CYBERDEFENDERS.CO.ZA CYBERSECURITY STATUS AND QUOTE REQUEST FORM

The following questionnaire is designed to help us quickly understand your business's cybersecurity risks and objectives. All information is kept strictly confidential. It is imperative that you share as much information as you can so that we can offer the most appropriate and customized feedback for you. If you do not know an answer, you can simply write that. If you have any questions at all while working through this document, please do not hesitate to contact us on email: action@cyberdefenders.co.za

SECTION 1.

(Getting to know you)

Client and Business / Organization Details

Client Full Name: *

Client Email Address: *

Client WhatsApp Number: *

Position / Portfolio at Business / Organization: *

Business / Organization Name

Business / Organization Registration: *

Business / Organization VAT / NPO / NGO#: *

Head Office Physical Address: *

Business / Organization Website: *

Business / Organization Social Media Accounts: *

Business / Organization Industry

Estimated Number of Employees / Colleagues: *

In a few words, please explain the hierarchy or management structure of the business: *

Do Employees / Colleagues use only Business / Organization devices, or also personal devices? *

Are personal devices allowed to access company systems, and are they monitored? *

Do Employees / Colleagues work at the office only, or at home / office and public spaces? *

Do you use of any biometrics, and if so, what? *

Do you use and Security surveillance and if so, what? *

Are employee access badges or logs tracked? *

What ballpark estimate would you say the business uses in terms of:

Desktops *

Laptops *

Cellphones *

Smart Devices *

AI Assistants *

IoT Devices *

Are internal networks segmented (e.g., separating finance, HR, guest Wi-Fi)? *

Do you use firewalls or network monitoring tools? *

Has the Business / Organization ever suffered a cyber-attack? *

If yes, briefly describe:

How were they mitigated and lessons learned applied?

What is your digital disaster recovery plan for a data breach or system hack? *

How are cybersecurity incidents reported internally? *

Is there a formal incident response team or procedure? *

Do you have a data protection policy in place? *

Are you compliant with relevant regulations? (Selection the options you are not compliant with)POPIAGDPRPCI-DSSHIPAAISO 27001 / ISO Standards (Information Security)SOC 2 / NIST (Service Providers / Cybersecurity Frameworks)Other

Does your business have a backup solution? If so, how often are backups performed? *

How are user access rights for hardware and software managed? *

Do employees use unique passwords for each system? *

Are shared accounts used, and how are they managed? *

How do you handle software licensing and compliance? *

Do you have a social media policy for Employees / Colleagues? *

Do you provide cybersecurity training for your employees? *

Do you work with third-party vendors? (Software, hardware, or security firms) If so, who, and how do you assess their security practices? *

Do third-party vendors have direct access to internal systems? *

Are they required to follow your security policies? *

Are there any particular digital integrations or partnerships that impact your cybersecurity? *

What specific security concerns or challenges does your business or organization face currently? *

What due diligence checks are done for new employees? *

Do you have a digital departure / termination policy and plan for Employees / Colleagues? *

Does your Business / Organization have a Legal Practitioner versed in cybersecurity? *

Does your business have insurance for cybersecurity? *

Does your business run any services outside of normal office hours? *

Does your business have:

Chief Information Officer (CIO): *

Chief Technology Officer (CTO): *

Chief Information Security Officer (CISO): *

Chief Data Officer (CDO): *

Chief Digital Officer (CDO): *

Compliance / Data Protection Officer (DPO): *

If applicable:

Who is your IT Contact Person?

Their Email Address:

Their WhatsApp Number:

Are they in-house or contract / outsourced:

Do you have any specific concerns or questions? Any at all.

SECTION 2

(Please Tick the box selection you would like a quote for. Quoting can take between 2-7 working days. No work is completed unless a Quote and Service Level Agreement is accepted.)

GENERAL TECHNICAL ASSESSMENT. A general overview assessment of your hardware, software, networks, internet connection, and front-facing systems (website and social media). This service is conducted on-site and remotely and requires access to technical infrastructure. Deliverable: A report on critical issues strictly related to vulnerabilities and recommendations. Certificate of completion will be provided.STAFF ASSESSMENT. The vast majority of breaches are caused by the human element. We conduct interviews to ascertain risk. This service is conducted on-site and remotely. Deliverable: A report on critical issues strictly related to vulnerabilities and recommendations. Certificate of completion will be provided.SECURITY ASSESSMENT / PENETRATION TESTING. Two parts: General Technical Assessment as well as a simulated attack on the network to identify vulnerabilities, which can include both social engineering/phishing and technical approaches. This service is conducted on-site and remotely and requires access to technical infrastructure as well as permission to stress-test systems. Deliverable: A report on critical issues strictly related to vulnerabilities and recommendations, as well as a detailed report on active vulnerabilities within the network requiring critical attention. Certificate of completion will be provided.SOFTWARE AND HARDWARE UPGRADE. A general technical assessment is required in order to provide a quote. Deliverable: A full report and quote based on software and hardware options available in the market, customized to the client's business/organization.TRAINING. Business/organization staff training covering risk awareness and response management. Certificate of completion will be provided.POLICY COMPLIANCE e.g., POPIA, PCI-DSS, ISO, GDPR, HIPAA. Compliance assessments and policy development and documentation. Certificate of completion will be provided.

SECTION 3

By completing and signing the acceptance below, you confirm that you are duly authorized to request that cyberdefenders.co.za prepare a customized quote and you understand that during this quoting process we will not be accessing your hardware or software. You are giving us permission for single-purpose use to interview/request information from related parties within your business/organization should further information or clarification be required.

Full Name: *

ID Number: *

Date: *

Location: *

Signature (please upload) *

No file chosen

Our job and the services we offer are to assess, consult, prepare, roll out, and support individuals and businesses. If you have any requests for any cyber safety services, please use our Immediate Action Request Form, and you will get a response within 4 working hours.

Click HERE to be directed to this form