Has your organization completed a Security Risk Assessment?

Does your organization have a documented Disaster Recovery plan?

Does your organization periodically check to assure your data is being backed up and can be restored in the event of an incident?

Does your organization have an Incident Response Plan to follow in the event of a security breach?

Are all your team members required to go through security training?

Does your organization have an enforced acceptable use policy for your technology?

Are your team members using encryption-protected mobile devices when they take work out of the office?

Does your organization have a strict password policy requiring complexity, regular changes, and lock-out after too many attempts?

Does your organization have an off-site encrypted backup?

Does your organization have a Security Incident Response Plan?

Have you rehearsed your Security Incident Response Plan?

Is there a documented procedure for terminating a team member's access to your network?

Does your organization restrict access to the server room?

Do team members protect passwords and not share with others?

Are the organization's laptops encrypted to protect the data stored on them?