Network Security Assessment

Welcome

The following survey takes approximately 1 minute. Complete it for a chance to win a $150 gift card.* Participants will be among the first to receive a free copy of our results. Participants’ responses will be anonymous within our published report.

*A raffle is held after every fifty responses. No purchase necessary. Void where prohibited.

Welcome
Welcome to the free peer benchmarking assessment. This survey will take approximately 5 minutes - complete it now to be included and receive a free copy of the report. Your individual responses will be completely anonymous when we publish the report.
How do you track assets, including MAC addresses, and audit the devices using your network discovery tools to ensure you know what is on your network?*
- Tracking assets automatically
- Whitelisting devices on more sensitive subnets
How do you ensure devices connecting to your network have a secure posture?*
- Using an agentless posture assessment
- Using an agent that checks users as they join
- Using an agent that checks in real-time
Which best practices for use of administrative accounts do you enforce?*
- Auditing admin accounts
- Rename default admin accounts
- Audit for weak or default passwords
- Require each user to do administration as a unique user
- Limit remote administration
How do you ensure network devices are regularly patched with latest firmware?*
- Use a tool to be made aware of available patches and devices that are not up to date
- Monitor CVEs and proactively apply maintenance
How do you audit network software and services in use to ensure the minimal set of network software is in use?*
- Audit installed network applications based on collecting what is installed leveraging a scanning tool (e.g. via WMI)
- Audit network applications/services based on scanning for inbound/outbound port usage.
- Process each deployment or reconfiguration of network software through a Change Management process.
How do you ensure audit logs are enabled on all servers, network devices, and application services, correlated with a SieM and monitored?*
- Collecting logs
- Correlating
- Monitoring, investigating, acknowledging logs
- Performing incident management on events as needed
How do you use network access control to control access to the network based on policy/contextually segmented devices and users*
- Users authenticate to secure networks via credentials before gaining access
- Devices authenticated via a certificate or as part of being managed devices
- Separate guest network with registration to collect identity
- IoT devices on a separate network
- Use WPA2E
How do you prevent and monitor for (potential) compromises?*
- Use a stateful firewall
- Use an IDS, IPS
- Use Endpoint protection software (e.g. Carbon Black, Sentinel One, etc.)
- Other
How do you protect users when remotely accessing services?*
- Ensure all connections are encrypted leveraging VPNs or SDP
- Use a whitelist with a CASB or SDP to control shadow IT
- Apply Data Loss Prevention features of CASBs
Check each that applies to how you train your employees on network security:*
- Involve all employees
- Assess effectiveness of training by baselining and monitoring effectiveness (e.g. did number of users falling for phishing attempts decline after training)
- Active, on-going reinforcement of key training points through repetition
Name*
Email Address*