Infrastructure

This survey seeks to assess the information technology infrastructure at your organization. It will ask questions about your computers, servers, networking, backups and policies.

Organization

1

Organization Name

Hardware & Software

2

Hardware standardized

Hardware is standardized across the organization.

Strongly Disagree
1
 
2
 
3
 
4
 
5
 
 Strongly Agree
N/A
 
3

Hardware upgades

Hardware is upgraded according to a set schedule.

Strongly Disagree
1
 
2
 
3
 
4
 
5
 
 Strongly Agree
4

Warranties

Critical hardware and software is under warranty and support contracts.

?

For example, servers, firewalls, accounting systems, etc. are all under current warranties with vendors.

Strongly Disagree
1
 
2
 
3
 
4
 
5
 
 Strongly Agree
5

Software upgrades

Software is upgraded before reaching end-of-life or before productivity is impacted.

Strongly Disagree
1
 
2
 
3
 
4
 
5
 
 Strongly Agree
6

Standardized software

Software is standardized across the organization. 

Strongly Disagree
1
 
2
 
3
 
4
 
5
 
 Strongly Agree
7

Antivirus solution

The organization has a centralized Antivirus solution running on desktops and laptops.

?

Optimally, all computers will have the same version of Antivirus installed.

Strongly Disagree
1
 
2
 
3
 
4
 
5
 
 Strongly Agree
8

Comments

Please add any comments you have regarding the Hardware & Software section.

Networking

9

Internet bandwidth

Internet bandwidth is sufficiently fast and reliable for the needs of the organization.

Strongly Disagree
1
 
2
 
3
 
4
 
5
 
 Strongly Agree
10

Firewall

A firewall is installed with active subscriptions for Unified Threat Management (UTM).

?

Unified Threat Management (UTM) monitors inbound and outbound network traffic for malware and signs of intrusion or attempted intrusion. Only applies to organizations with networks used by multiple staff. Not applicable to organizations that are completely distributed. 

Strongly Disagree
1
 
2
 
3
 
4
 
5
 
 Strongly Agree
11

Network switches

Network switches are installed and adequately manage network traffic.

?

What is a switch? Wikipedia's definition of a switch is as follows: "A network switch (also called switching hub, bridging hub, officially MAC bridge) is a computer networking device that connects devices together on a computer network by using packet switching to receive, process, and forward data to the destination device.

Strongly Disagree
1
 
2
 
3
 
4
 
5
 
 Strongly Agree
12

Network wiring

Network wiring is appropriately run, and data ports are labeled at the jack and switch.

Strongly Disagree
1
 
2
 
3
 
4
 
5
 
 Strongly Agree
13

Security for wireless access

Wireless access points have appropriate security in place.

?

Wireless access points should use WPA2 Encryption at a minimum. If your organization does not use wireless, please select 5. 

Strongly Disagree
1
 
2
 
3
 
4
 
5
 
 Strongly Agree
14

Comments

Please add any comments you have regarding the Networking section.

Cloud Technology

15

Cloud technology

The organization is adopting cloud technology in an appropriate and strategic manner.

?

Example: Appropriate applications and services have been migrated to the cloud or are under consideration for cloud migration.

Strongly Disagree
1
 
2
 
3
 
4
 
5
 
 Strongly Agree
16

Cloud-based accounts

Cloud-based accounts are protected by complex passwords.

?

Optimally, password policies enforce password changes and set complexity rules for passwords. Select 5 if your organization has no cloud-based accounts. 

Strongly Disagree
1
 
2
 
3
 
4
 
5
 
 Strongly Agree
17

Data access and storage

The organization understands how its data is being stored and accessed.

Strongly Disagree
1
 
2
 
3
 
4
 
5
 
 Strongly Agree
18

Data Loss Prevention Plan

The organization has a Data Loss Prevention Plan (DLP) in place.

?

Example: Measures are in place which prevent staff from deleting critical information.

Strongly Disagree
1
 
2
 
3
 
4
 
5
 
 Strongly Agree
19

Cloud service outages

The organization has a plan for handling cloud service outages.

Strongly Disagree
1
 
2
 
3
 
4
 
5
 
 Strongly Agree
20

Comments

Please add any comments you have regarding the Cloud Technology section.

Availability

21

Shared network resources

Shared network resources are available and reliable.

?

Example: Shared files, printers, copiers, and scanners, etc. are available and work reliably.

Strongly Disagree
1
 
2
 
3
 
4
 
5
 
 Strongly Agree
22

Remote access

Staff are able to work remotely, wherever they have internet access, and are able to access email, documents, applications and data as appropriate to their role.

Strongly Disagree
1
 
2
 
3
 
4
 
5
 
 Strongly Agree
23

Internet service redundancy

The organization's internet service is configured for redundancy.

?

Example: The organization has two (2) separate internet connections from different providers and has them configured for load-balancing/failover.

Strongly Disagree
1
 
2
 
3
 
4
 
5
 
 Strongly Agree
24

Remote use policy

The organization has documented policies for remote workers.

?

Example: There is a policy as part of employee onboarding that describes remote use policies.

Strongly Disagree
1
 
2
 
3
 
4
 
5
 
 Strongly Agree
25

Bring Your Own Device

The organization supports BYOD (Bring Your Own Device) so that staff are able to access appropriate resources from their personal devices.

Strongly Disagree
1
 
2
 
3
 
4
 
5
 
 Strongly Agree
26

Comments

Please add any comments you have regarding the Availability section.

Continuity

27

Backups

Designated staff ensure that all resources (including cloud resources) are backed up both locally, and offsite (or in the cloud).

Strongly Disagree
1
 
2
 
3
 
4
 
5
 
 Strongly Agree
28

Testing backups

Restore and backup selections are tested and reviewed according to a schedule.

Strongly Disagree
1
 
2
 
3
 
4
 
5
 
 Strongly Agree
29

Business continuity

Leadership demonstrates an understanding of its most critical technology services and how those services may be impacted by various disruptive events.

Strongly Disagree
1
 
2
 
3
 
4
 
5
 
 Strongly Agree
30

Business continuity plan

An effective disaster recovery/business continuity plan is in place.

?

Example: Management understands what systems would and would not be available in the event of an extended power outage to the primary office.

Strongly Disagree
1
 
2
 
3
 
4
 
5
 
 Strongly Agree
31

Network and systems monitoring

There is active monitoring of critical systems/processes and alerts to notify key personnel in the event of anomalous events and/or outages.

Strongly Disagree
1
 
2
 
3
 
4
 
5
 
 Strongly Agree
32

Comments

Please add any comments you have regarding the Continuity section.

33

Magic wand question

If you could wave a magic wand and change ONE thing about your organization's IT infrastructure, what would that be?

How would it help you? How would it help your organization?

* Answer required