turvatesti.fi / Security management audit

Security management audit: safety test and checklist

7 questions, 0 of which are based on law. Answer and get your score and a list of fixes straight away.

Checklist

1. Does the organisation have a security policy and responsibilities approved by management? Recommendation
   Management commitment is the foundation of all management systems (ISO 45001, ISO 27001).
2. Is risk management a continuous process in which risks are assessed and monitored regularly? Recommendation
   Risk register, responsibilities and follow-up.
3. Is there a continuity plan for disruptions to critical functions? Recommendation
   For example an electricity, data or staff outage.
4. Is there a crisis communication plan, and is it rehearsed? Recommendation
   In a crisis, the speed of communication decides reputation.
5. Are deviations and near misses reported and handled? Recommendation
   Learning from deviations prevents serious accidents.
6. Is the safety of suppliers and subcontractors assessed? Recommendation
   The supply chain is increasingly often the route of attacks.
7. Are the management review and internal audit held at least once a year? Recommendation
   An inspection ensures that the measures are carried out.

All tests →