Zero Trust Assessment

What zero trust technologies do you currently use? (e.g. Secure Identity Management, Mobile Device Management (MDM), Multi-Factor Authentication (MFA), SIEM, IaaS, PaaS)

What platform(s) and application(s) are you using and providing to your users? (e.g. Office 365, G Suite, In-house Application, Azure, AWS)

What are your goals to move to Zero Trust? (e.g. Improved BYOD visibility, improved remote workforce security)

Do you currently have a Security Information and Event Management (SIEM) system in place?

YesNo

How far along in your Zero Trust migration are you?

Initial ResearchSome Technologies DeployedFunctional Hybrid ModelMature Zero Trust Environment

Any other information you would like to share that would be relevant?

How large is your organization (based on number of employees)?

1-1011-100101-500More than 500

How many physical locations?

12-55-20More than 20

How large is your IT staff?

012-55-20More than 20

How many IT staff members have security as their primary role?

012-55-20More than 20

What is your yearly IT budget?

Less than $10,000$10,000-$50,000$50,000-$250,000More than $250,000

What server/application technologies are you running? (e.g. Windows server, Linux server, virtualization, web applications, file server, Active Directory)

Currently, how segmented is your network?

Flat NetworkProduction and Test/Development SeparatedLogical Separations by Organization Department

How mature would you describe your IT and security processes?

Ad-hocRepeatable ProcessesDefined Change ManagementQuantifiable MetricsEfficient and Continuous Improvement

What technologies do you plan to add in the next 12-24 months?

In the last year, has your company performed any security assessments?

Risk AssessmentVulnerability AssessmentPenetration TestBreach AssessmentNone of these

How do employees access network resources when not physically in the office?

No AccessVPNDirect Connection

Is your company currently utilizing a Zero Trust model or concepts?

YesNoI don't know

Is your company planning on switching to Zero Trust in the next 12-24 months?

YesNoAfter 24 months

Do you currently have a centralized logging or SIEM technology in place?

YesNoI don't know what a SIEM is

What log sources would you want to ingest into a centralized logging platform? (e.g. Windows event log, network device log, web traffic, antivirus infections)