turvatesti.fi / Company cyber security

Company cyber security: safety test and checklist

6 questions, 2 of which are based on law. Answer and get your score and a list of fixes straight away.

1. What do you need a safety test for?

Do all user accounts have multi-factor authentication? Recommendation
Multi-factor authentication is the most effective single protection against account takeovers.
Is there a backup that ransomware cannot reach, and has restoring been tested? Recommendation
An untested backup is not a backup.
Are devices and software updated in a controlled way? Recommendation
Known vulnerabilities are the most common attack route.
Has the staff been trained to recognise phishing? Recommendation
The majority of data breaches start with an email or a message.
Has it been established whether the Cybersecurity Act (NIS2) applies to the company? Statutory
The Cybersecurity Act obliges medium-sized and large operators in certain sectors to carry out risk management and report incidents.
Cybersecurity Act (NIS2)
Is the processing of personal data described, and is the procedure for notifying data breaches known? Statutory
Data Protection Regulation: a personal data breach must be reported to the supervisory authority within 72 hours if it causes a risk.
Data Protection Regulation (EU) 2016/679, Article 33