Ross Networking Consultants

This Risk Assessment Worksheet is provided to help you evaluate your company's computer systems risks. This is not a complete Risk Assessment Worksheet that we use, although it can be used as a guide to help you determine your risk areas. After you complete this, contact us for a complete Risk Assessment and we can help you prevent potential problems.

Data Backups:
1. Is your business's critical data being backed up?	Y	N
2. Is your backup media being stored off-site?	Y	N
3. Is someone trained how to check the backups (looking at backup logs)?	Y	N
4. Have you run a test restore to insure you can restore data?	Y	N
5. Do you have a tape backup cleaning cartridge and if so, do you run a cleaning at least once a month minimum?	Y	N
Security:
6. Do you access the Internet?	Y	N
7. Do you have a firewall to protect your network from hackers?	Y	N
8. Does everyone accessing your network have a password?	Y	N
9. If you send confidential information to others, are the data files being encrypted?	Y	N
10. Do you have a security policy? If so, is it documented? Are employees trained on security?	Y	N
11. Do you log out of your computers while you are not at your desk?	Y	N
12. Do you regularly change passwords - especially when you terminate an employee?	Y	N
Reliability/Down-Time
13. Do you have an anti-virus program installed on your computers and servers?	Y	N
14. Are you checking your virus definition files to insure that you are protected against new viruses?	Y	N
15. Is your anti-virus program configured to scan all files?	Y	N
16. Is your anti-virus program configured to run manual scans at least once a week?	Y	N
17. Do all of your computers, servers, and other equipment have some type of surge protection?	Y	N
18. Do your servers, hubs, routers, etc. have a battery backup?	Y	N
19. Do you have regular preventive maintenance on your equipment?	Y	N
20. Do you have a disaster recovery plan in case of floods, fires, and other catastrophes?	Y	N
21. If you have a computer support company, are they proactive?	Y	N
22. If you have a computer support company, when problems are fixed, do they stay fixed?	Y	N
23. If you have a computer support company, have they discussed a down-time requirement with you? If so, is the requirement being achieved?	Y	N

If you have a computer support company, have they addressed the issues above?

If you answered N to any of the questions above, your business may be at risk for possible data loss, confidential information being accessed by unauthorized personnel, or system down-time. Please contact us if you wish to correct any potential risk issues.