Cybersecurity for Startups

Do you have a documented and available set of updated and current procedures for security and IT management in your organization? This includes documents on data integrity, business conitnuity, incident response, physical security, etc

Is there a person primarily responsible for managing security initiatives within your organization?

Do you have a prepared and tested Business Continuity/Disaster Recovery plan?

Do you have a prepared and tested Incident Response Plan (including handling, monitoring and reporting of the incident)?

If you are developing in software/applications, have you implemented a secure software development lifecycle?

Are you performing vulnerability assessments, penetration testing and vulnerability management on information system assets (network, website, endpoints, servers, software, web applications, etc)?

Are you performing regular inventory of all IT assets (hardware and software)?

Are you a venture backed startup ?

Are you employing anti-malware and other security controls such as firewall, data loss prevention, intrusion detection/prevention systems across your environment?

Are you prepared to satisfy procurement mandates for your large client (internal security, data governance, legal mandates)?