What’s your IT Vulnerability Score? 

Quiz Questions

• 1.
  FACILITIES ACCESS: Click each "yes" answer 

  Image Source

  • A.
    Does your staff wear ID Badges?
  • B.
    Do you have a Security Access Control system that logs access to the building and critical IT areas?
  • C.
    Do you check the credentials of external contractors?
  • D.
    Do you have a process for effectively cutting off access to facilities and information systems when an employee/ contractor terminates employment?
  • E.
    Is access to your computing area controlled (single point, reception or security desk, sign-in/sign-out log, temporary/visitor badges, RFID badge access)?
  • F.
    Is your computing area and equipment physically secured?
  • G.
    Does management regularly review lists of individuals with physical access to sensitive facilities or electronic access to information systems?
  • H.
    We do not have any of these facilities access security measures in place!
• 2.
  IT SECURITY POLICIES: Click each "yes" answer

  Image Source

  • A.
    Do you have a Security/Access Control/ Authorized/Acceptable Use/ etc. policy?
  • B.
    Do you have policies and standards covering electronic authentication, authorization, and access control of personnel?
  • C.
    Do you have policies covering laptop security (e.g., cable lock or secure storage, encryption at the hardware layer)?
  • D.
    Are there policies in place to enforce the encryption and management of mobile devices?
  • E.
    We do not have any of these IT Security Policies in place!
• 3.
  ACCOUNT & PASSWORD MANAGEMENT: Click each "yes" answer

  Image Source

  • A.
    Are your passwords configured globally to be complex, include forced changes and have a maximum password age?
  • B.
    Do you require and enforce password access to all systems?
  • C.
    Do you utilize Multi Factor Authentication (MFA) for your critical external facing systems?
  • D.
    Do you enforce strict guidelines behind password management (don’t write it down, don’t share with others, etc.)?
  • E.
    We do not have any of these account and password management measures in place
• 4.
  DISASTER RECOVERY: Click each "yes" answer

  Image Source

  • A.
    Do you back up critical data locally?
  • B.
    Do you back up critical data offsite?
  • C.
    Do you have a documented Disaster Recovery or Business Continuity Plan?
  • D.
    Do you have a process to test backups regularly?
  • E.
    We do not have any of these disaster recovery measures in place!
• 5.
  COMPLIANCE AND AUDIT: Click each "yes" answer

  Image Source

  • A.
    Do you currently require all staff to regularly attend Security Awareness Trainings?
  • B.
    Do you have a program in place to test and educate your users on evolving security threats?
  • C.
    Do you currently have Cybersecurity Insurance?
  • D.
    Do you review and revise your security documents, such as: policies, standards, procedures, and guidelines, on a regular basis?
  • E.
    Do you audit your processes and procedures for compliance with established policies and standards?
  • F.
    Do you have systems in place to audit changes made to your environment?
  • G.
    We do not have any of these compliance and audit measures in place!

Quiz Outcomes

• 1.
  Your IT Vulnerability is in the IMPENDING CRISIS ZONE

  Image Source

  MAJOR FAIL. A cybersecurity breach is imminent. You MUST take immediate action NOW to protect your law firm from getting breached and the serious consequences that follow. Please pick up the phone and call us at 1-800-377-1648 ASAP for help. We will rapidly assess and prioritize your security needs as well as strengthen your network security to reduce your HIGH risks (while also improving your productivity). In addition, we’ll help you transition from your current IT provider to us. With over 20 years of experience in managing IT Services for law firms, we’ve helped many firms dramatically reduce their cybersecurity risk. Do not wait to act to improve your firm’s cybersecurity. At the end of the day, if you do nothing, you risk losing everything. Call us now.
• 2.
  Your IT Vulnerability is HIGH

  Image Source

  WARNING! Your cybersecurity risk is HIGH, which means that an attack or loss of data is highly probable. You need to take immediate action to resolve areas that are leaving you exposed to cyberattacks. Now’s the time to reach out to your IT provider for their expertise and help. If you do not have an IT partner and/or are looking for a stronger cybersecurity program, please contact us. We’ll walk you through a top to bottom cybersecurity assessment of your entire IT environment. You’ll receive a technology roadmap, an implementation strategy, and guidance on where to spend your IT budget wisely.
• 3.
  Your IT Vulnerability is MEDIUM

  Image Source

  It’s obvious that you’re aware and care about keeping your company cyber secure. You’ve invested in some great security efforts. However, there are still a few high-risk areas that need to be addressed to keep your company safe. We recommend that you contact your current IT provider to address the issues you uncovered in this quiz. If you don’t currently have an IT provider or are frustrated with their performance, consider taking a cyber security assessment. This will give you the most current information about your law firm’s cybersecurity standing. With these findings, you’ll be able to take the correct action steps to reduce your risk.
• 4.
  Your IT Vulnerability is LOW

  Image Source

  Congratulations. You’ve done a great job of securing your network. Since cyber-attacks will continue to change and evolve over time, it’s important to remain vigilant and aware of the latest security threats. Staying informed can pose challenges depending how who is managing and supporting your technology needs. If you’re looking to stay current on the latest cyberthreats and security trends, please follow our blog and LinkedIn page. It's important that all law firms know how to protect themselves now and into the future.