TotalSelected

VA Score

A cloud-based, centralized Anti-Virus/Endpoint Security solution is deployed across all company devices with real-time monitoring.

Stage1

A secure, enterprise-grade email platform (e.g., Microsoft 365, Google Workspace, Zoho) is used with built-in compliance and threat protection features.

Servers, endpoints, and applications are updated and patched through a centralized management console, with logs and alerts tracked for compliance.

A documented Disaster Recovery and Business Continuity Plan exists for all mission-critical systems and data.

Only licensed and compliant versions of all Operating Systems and applications are in use.

Managed network switches are configured with VLANs, policies, and access controls to secure and segment the office network.

Multi-Factor Authentication (MFA) is enforced on all email accounts, public-facing applications, and business-critical systems.

Stage2

Local Active Directory or Azure AD is used to manage users, group policies, and access rights across the organization.

Privileged Access Management (PAM) or Role-Based Access Control (RBAC) is implemented to restrict and monitor admin access.

User account creation, modification, and termination follow a documented and approved process.

Controls on USB drives, Wi-Fi, Bluetooth, and other peripherals are centrally configured, restricted, or monitored.

A centrally managed cloud or on-premises tool (e.g., Intune, SCCM) is used to deploy OS, applications, and monitor device compliance.

Advanced email security and anti-phishing solutions are deployed to protect against spam and malicious emails.

Stage3

A firewall/UTM device is deployed to filter and monitor incoming and outgoing traffic.

Disk encryption (e.g., BitLocker, FileVault) is enabled on company devices, with encryption keys securely maintained and managed through a centralized console. This ensures data protection while allowing IT teams to assist employees seamlessly if devices are lost or need recovery.

Policies exist to prevent unauthorized data sharing or copying, including Data Loss Prevention (DLP) controls.

Data is classified based on sensitivity (Confidential, Restricted, Public).

The organization is compliant with applicable data protection regulations (GDPR, HIPAA, CCPA, etc.).

Penetration testing and vulnerability assessments are conducted at least annually.

Stage4

Login attempts, system access, and user activities are logged and regularly reviewed.

Alerts for suspicious or risky behavior (failed logins, privilege escalation, unusual access) are configured and monitored.

IT systems provide visibility into device health, application usage, and security status, helping both employees and IT teams identify and resolve issues proactively before they impact productivity.

A centralized inventory of all IT assets, including applications, user accounts, devices, servers, and network equipment, is maintained and regularly updated.

IT and security events are centrally monitored through SIEM/SOC capabilities, and employees as well as management receive clear monthly security summaries from the IT administrator or MSP (Managed Service Provider) to maintain transparency and trust.

Employees receive regular cybersecurity awareness and business application training (e.g., email, collaboration, and productivity tools) to improve efficiency and achieve higher productivity.

Stage5

Phishing simulations are conducted to test and improve employee awareness.

The onboarding and exit process is secure, documented, and includes IT and security training for new hires as part of induction.

Employees actively acknowledge and commit to IT security and acceptable use policies, understanding how these guidelines enable them to work safely, responsibly, and with greater confidence.

Common business processes (e.g., leave requests, approvals, reminders) are automated through digital workflows to save time, reduce manual effort, and maintain easily accessible records.

An employee experience platform (e.g., Microsoft Viva, Slack, or similar) is used to improve collaboration, engagement, and well-being while helping employees balance productivity and personal growth.

VA Score

Please go through each Stage and tick the boxes that apply to you.

Stage 1: Foundation