2025-06-09 13:48:34 +02:00
{% load static %}
< head >
< meta name = "viewport" content = "width=device-width, initial-scale=1" >
< title > Risk Assessment Questions< / title >
< link href = "{% static 'css/bootstrap.css' %}" rel = "stylesheet" >
< link href = "{% static 'css/Jost.css' %}" rel = "stylesheet" >
< link href = "{% static 'css/main.css' %}" rel = "stylesheet" >
< link href = "{% static 'css/index.css' %}" rel = "stylesheet" >
< link href = "{% static 'css/getstarted.css' %}" rel = "stylesheet" >
< link href = "https://fonts.googleapis.com/css2?family=Darker+Grotesque:wght@300..900&display=swap" rel = "stylesheet" >
< link rel = "stylesheet" href = "https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.0/css/all.min.css" >
< / head >
< body >
< header >
< div class = "gs-logo" >
< a class = "gs-logo" href = "/" > risklet< / a >
< / div >
< div class = "progress mb-3" id = "basic-progress-bar-wrap" >
< div id = "basic-progress-bar" class = "progress-bar" role = "progressbar" style = "width: 0%" > < / div >
< / div >
< div class = "progress mb-3 d-none" id = "advanced-progress-bar-wrap" >
< div id = "advanced-progress-bar" class = "progress-bar bg-success" role = "progressbar" style = "width: 0%" > < / div >
< / div >
< / header >
2024-12-29 03:44:52 +01:00
< div class = "container" >
< div class = "row" >
< div class = "col" >
2025-06-09 13:48:34 +02:00
< div id = "basic-progress" class = "mb-3 text-center fw-bold" > < / div >
< div id = "advanced-progress" class = "mb-3 text-center fw-bold d-none" > < / div >
2025-05-13 15:04:12 +02:00
< hr >
2024-12-29 03:44:52 +01:00
< form method = "post" >
2025-04-24 12:53:26 +02:00
{% if form.errors %}
< div class = "alert alert-danger" >
2025-05-06 18:59:29 +02:00
< ul class = "mb-0" >
{% for field in form %}
{% for error in field.errors %}
< li > < strong > {{ field.label }}:< / strong > {{ error }}< / li >
{% endfor %}
{% endfor %}
{% for error in form.non_field_errors %}
< li > {{ error }}< / li >
{% endfor %}
< / ul >
2024-12-29 03:44:52 +01:00
< / div >
2025-04-24 12:53:26 +02:00
{% endif %}
{% csrf_token %}
<!-- Organization Name & Email -->
2024-12-29 03:44:52 +01:00
2025-05-13 15:04:12 +02:00
< div class = "mb-3 question basic-section" id = "q0" >
2025-04-24 12:53:26 +02:00
< label class = "form-label mt-3" > Organization Name and Your Email:< / label >
2024-12-29 03:44:52 +01:00
< hr >
< div class = "pb-3" >
2025-04-24 12:53:26 +02:00
< input type = "text" class = "form-control mb-3" id = "name" name = "name" placeholder = "Organization Name" required >
< input type = "email" class = "form-control" id = "email" name = "email" placeholder = "Your Email" required >
2024-12-29 03:44:52 +01:00
< / div >
2025-04-24 12:53:26 +02:00
< small class = "form-text text-muted py-3" >
Enter the organization name and your email address. Both fields are required to continue.
< / small >
2025-05-06 18:59:29 +02:00
< div id = "org-email-error" class = "text-danger py-2" > < / div >
2024-12-29 03:44:52 +01:00
< / div >
<!-- Employee Headcount -->
2025-05-13 15:04:12 +02:00
< div class = "mb-3 question basic-section" id = "q1" >
2025-04-24 12:53:26 +02:00
< label class = "form-label mt-3" > Employee Headcount:< / label >
< small class = "form-text text-muted" >
Select one range - Scale factor for internal user base & potential insider risk
< / small >
2024-12-29 03:44:52 +01:00
< hr >
< div class = "pb-3" >
< div class = "form-check" >
2025-04-24 12:53:26 +02:00
< input class = "form-check-input" type = "radio" name = "employee_headcount" id = "employees-1-50" value = "1-50" required >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "employees-1-50" >
< i class = "fa-solid fa-user" > < / i > 1 - 50
< / label >
2025-04-24 12:53:26 +02:00
< / div >
< div class = "form-check" >
< input class = "form-check-input" type = "radio" name = "employee_headcount" id = "employees-51-250" value = "51-250" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "employees-51-250" >
< i class = "fa-solid fa-users" > < / i > 51 - 250
< / label >
2025-04-24 12:53:26 +02:00
< / div >
< div class = "form-check" >
< input class = "form-check-input" type = "radio" name = "employee_headcount" id = "employees-251-1000" value = "251-1000" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "employees-251-1000" >
< i class = "fa-solid fa-building" > < / i > 251 - 1,000
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
2025-04-24 12:53:26 +02:00
< input class = "form-check-input" type = "radio" name = "employee_headcount" id = "employees-1001-5000" value = "1001-5000" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "employees-1001-5000" >
< i class = "fa-solid fa-city" > < / i > 1,001 - 5,000
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
2025-04-24 12:53:26 +02:00
< input class = "form-check-input" type = "radio" name = "employee_headcount" id = "employees-5001-10000" value = "5001-10000" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "employees-5001-10000" >
< i class = "fa-solid fa-industry" > < / i > 5,001 - 10,000
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
2025-04-24 12:53:26 +02:00
< input class = "form-check-input" type = "radio" name = "employee_headcount" id = "employees-10000plus" value = "10000+" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "employees-10000plus" >
< i class = "fa-solid fa-landmark" > < / i > 10,000+
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< / div >
< small class = "form-text text-muted py-3" > Helps determine the scale of IT infrastructure and security
needs based on user volume.< / small >
< / div >
<!-- Annual Revenue -->
2025-05-13 15:04:12 +02:00
< div class = "mb-3 question basic-section" id = "q2" >
2025-04-24 12:53:26 +02:00
< label class = "form-label mt-3" >
Annual Revenue Range:
< br >
< small class = "form-text text-muted" >
Select one range - Indicates scale, potential financial impact, and attractiveness
< / small >
< / label >
2024-12-29 03:44:52 +01:00
< hr >
< div class = "pb-3" >
< div class = "form-check" >
2025-04-24 12:53:26 +02:00
< input class = "form-check-input" type = "radio" name = "annual_revenue" id = "revenue-under-10m" value = "under-10m" required >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "revenue-under-10m" >
< i class = "fa-solid fa-coins" > < / i > < $10 Million
< / label >
2025-04-24 12:53:26 +02:00
< / div >
< div class = "form-check" >
< input class = "form-check-input" type = "radio" name = "annual_revenue" id = "revenue-10m-250m" value = "10m-250m" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "revenue-10m-250m" >
< i class = "fa-solid fa-sack-dollar" > < / i > $10M - $250 Million
< / label >
2025-04-24 12:53:26 +02:00
< / div >
< div class = "form-check" >
< input class = "form-check-input" type = "radio" name = "annual_revenue" id = "revenue-250m-1b" value = "250m-1b" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "revenue-250m-1b" >
< i class = "fa-solid fa-money-bill-wave" > < / i > $250M - $1 Billion
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
2025-04-24 12:53:26 +02:00
< input class = "form-check-input" type = "radio" name = "annual_revenue" id = "revenue-1b-5b" value = "1b-5b" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "revenue-1b-5b" >
< i class = "fa-solid fa-vault" > < / i > $1B - $5 Billion
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
2025-04-24 12:53:26 +02:00
< input class = "form-check-input" type = "radio" name = "annual_revenue" id = "revenue-above-5b" value = "above-5b" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "revenue-above-5b" >
< i class = "fa-solid fa-gem" > < / i > > $5 Billion
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
2025-04-24 12:53:26 +02:00
< input class = "form-check-input" type = "radio" name = "annual_revenue" id = "revenue-non-profit" value = "non-profit" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "revenue-non-profit" >
< i class = "fa-solid fa-hand-holding-heart" > < / i > Not Applicable / Non-Profit
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< / div >
< small class = "form-text text-muted py-3" > Indicates available resources for cybersecurity investments
and
helps assess risk appetite.< / small >
< / div >
<!-- Critical Business Applications -->
2025-05-13 15:04:12 +02:00
< div class = "mb-3 question basic-section" id = "q3" >
2024-12-29 03:44:52 +01:00
< label class = "form-label mt-3" > How many critical business applications do your employees use
daily?< / label >
< hr >
< div class = "pb-3" >
< div class = "form-check" >
2025-06-09 13:48:34 +02:00
< input class = "form-check-input" type = "radio" name = "critical_applications" id = "apps-1-5" value = "1-5" required >
< label class = "form-check-label" for = "apps-1-5" >
< i class = "fa-solid fa-laptop" > < / i > 1-5
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
2025-06-09 13:48:34 +02:00
< input class = "form-check-input" type = "radio" name = "critical_applications" id = "apps-5-20" value = "5-20" >
< label class = "form-check-label" for = "apps-5-20" >
< i class = "fa-solid fa-network-wired" > < / i > 5-20
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
2025-06-09 13:48:34 +02:00
< input class = "form-check-input" type = "radio" name = "critical_applications" id = "apps-more-than-20" value = "more-than-20" >
< label class = "form-check-label" for = "apps-more-than-20" >
< i class = "fa-solid fa-server" > < / i > More than 20
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
2025-06-09 13:48:34 +02:00
< input class = "form-check-input" type = "radio" name = "critical_applications" id = "apps-unknown" value = "unknown" >
< label class = "form-check-label" for = "apps-unknown" >
< i class = "fa-solid fa-question-circle" > < / i > I don't know
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< / div >
< small class = "form-text text-muted py-3" > Reveals the complexity of your technology landscape and
potential attack surface.< / small >
< / div >
<!-- Regulatory Frameworks -->
2025-05-13 15:04:12 +02:00
< div class = "mb-3 question basic-section" id = "q4" >
2025-04-24 12:53:26 +02:00
< label class = "form-label mt-3" >
Applicable Regulatory / Compliance Frameworks:
< br >
< small class = "form-text text-muted" >
Select all applicable - Indicates compliance burden & potential fines/penalties
< / small >
< / label >
2024-12-29 03:44:52 +01:00
< hr >
2025-06-09 13:48:34 +02:00
< div class = "pb-3 option-grid" >
2024-12-29 03:44:52 +01:00
< div class = "form-check" >
2025-04-24 12:53:26 +02:00
< input class = "form-check-input" type = "checkbox" name = "compliance_frameworks" id = "compliance-gdpr" value = "gdpr" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "compliance-gdpr" >
< i class = "fa-solid fa-globe-europe" > < / i > GDPR
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
2025-04-24 12:53:26 +02:00
< input class = "form-check-input" type = "checkbox" name = "compliance_frameworks" id = "compliance-ccpa" value = "ccpa" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "compliance-ccpa" >
< i class = "fa-solid fa-flag-usa" > < / i > CCPA / CPRA
< / label >
2025-04-24 12:53:26 +02:00
< / div >
< div class = "form-check" >
< input class = "form-check-input" type = "checkbox" name = "compliance_frameworks" id = "compliance-cra" value = "cra" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "compliance-cra" >
< i class = "fa-solid fa-shield-halved" > < / i > CRA (Cyber Resilience Act)
< / label >
2025-04-24 12:53:26 +02:00
< / div >
< div class = "form-check" >
< input class = "form-check-input" type = "checkbox" name = "compliance_frameworks" id = "compliance-nis2" value = "nis2" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "compliance-nis2" >
< i class = "fa-solid fa-plug-circle-bolt" > < / i > NIS2
< / label >
2025-04-24 12:53:26 +02:00
< / div >
< div class = "form-check" >
< input class = "form-check-input" type = "checkbox" name = "compliance_frameworks" id = "compliance-hipaa" value = "hipaa" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "compliance-hipaa" >
< i class = "fa-solid fa-notes-medical" > < / i > HIPAA
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
2025-04-24 12:53:26 +02:00
< input class = "form-check-input" type = "checkbox" name = "compliance_frameworks" id = "compliance-pci-dss" value = "pci-dss" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "compliance-pci-dss" >
< i class = "fa-solid fa-credit-card" > < / i > PCI-DSS
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
2025-04-24 12:53:26 +02:00
< input class = "form-check-input" type = "checkbox" name = "compliance_frameworks" id = "compliance-sox" value = "sox" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "compliance-sox" >
< i class = "fa-solid fa-chart-line" > < / i > SOX
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
2025-04-24 12:53:26 +02:00
< input class = "form-check-input" type = "checkbox" name = "compliance_frameworks" id = "compliance-cmmc" value = "cmmc" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "compliance-cmmc" >
< i class = "fa-solid fa-medal" > < / i > CMMC
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
2025-04-24 12:53:26 +02:00
< input class = "form-check-input" type = "checkbox" name = "compliance_frameworks" id = "compliance-energy" value = "energy" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "compliance-energy" >
< i class = "fa-solid fa-bolt" > < / i > Specific Energy Regulations (e.g., NERC CIP)
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
2025-04-24 12:53:26 +02:00
< input class = "form-check-input" type = "checkbox" name = "compliance_frameworks" id = "compliance-financial" value = "financial" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "compliance-financial" >
< i class = "fa-solid fa-building-columns" > < / i > Specific Financial Regulations (DORA)
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
2025-04-24 12:53:26 +02:00
< input class = "form-check-input" type = "checkbox" name = "compliance_frameworks" id = "compliance-none" value = "none" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "compliance-none" >
< i class = "fa-solid fa-circle-xmark" > < / i > None / Primarily Best Practices Driven
< / label >
2024-12-29 03:44:52 +01:00
< / div >
2025-05-12 20:46:17 +02:00
< div class = "form-check other-gap" >
< div class = "other-row" >
< input class = "form-check-input" type = "checkbox" name = "compliance_frameworks" id = "compliance-other" value = "other" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label ms-2" for = "compliance-other" >
< i class = "fa-solid fa-ellipsis" > < / i > Other Industry-Specific Regulations:
< / label >
2025-05-12 20:46:17 +02:00
< / div >
< input type = "text" class = "form-control mt-2" name = "compliance_frameworks_other" id = "compliance-frameworks-other-text" placeholder = "Please specify" >
< / div >
2024-12-29 03:44:52 +01:00
< / div >
< small class = "form-text text-muted py-3" > Identifies mandatory security controls and compliance
requirements that must be implemented.< / small >
< / div >
<!-- Industry Sector -->
2025-05-13 15:04:12 +02:00
< div class = "mb-3 question basic-section" id = "q5" >
2025-04-24 12:53:26 +02:00
< label class = "form-label mt-3" >
Primary Industry Sector:
< br >
< small class = "form-text text-muted" >
2025-07-14 16:49:27 +02:00
Select the main industry sector that best describes your organization.
2025-04-24 12:53:26 +02:00
< / small >
< / label >
2024-12-29 03:44:52 +01:00
< hr >
2025-07-14 16:49:27 +02:00
< div class = "form-check" >
< input class = "form-check-input" type = "radio" name = "industry_sector" id = "industry-agriculture" value = "Agriculture, forestry and fishing" required >
< label class = "form-check-label" for = "industry-agriculture" >
< i class = "fa-solid fa-seedling" > < / i > Agriculture, forestry and fishing
< / label >
< / div >
< div class = "form-check" >
< input class = "form-check-input" type = "radio" name = "industry_sector" id = "industry-mining" value = "Mining and quarrying" >
< label class = "form-check-label" for = "industry-mining" >
< i class = "fa-solid fa-mountain" > < / i > Mining and quarrying
< / label >
< / div >
< div class = "form-check" >
< input class = "form-check-input" type = "radio" name = "industry_sector" id = "industry-manufacturing" value = "Manufacturing" >
< label class = "form-check-label" for = "industry-manufacturing" >
< i class = "fa-solid fa-industry" > < / i > Manufacturing
< / label >
< / div >
< div class = "form-check" >
< input class = "form-check-input" type = "radio" name = "industry_sector" id = "industry-electricity" value = "Electricity, gas, steam and air conditioning supply" >
< label class = "form-check-label" for = "industry-electricity" >
< i class = "fa-solid fa-bolt" > < / i > Electricity, gas, steam and air conditioning supply
< / label >
< / div >
< div class = "form-check" >
< input class = "form-check-input" type = "radio" name = "industry_sector" id = "industry-water" value = "Water supply; sewerage, waste management and remediation activities" >
< label class = "form-check-label" for = "industry-water" >
< i class = "fa-solid fa-water" > < / i > Water supply; sewerage, waste management and remediation activities
< / label >
< / div >
< div class = "form-check" >
< input class = "form-check-input" type = "radio" name = "industry_sector" id = "industry-construction" value = "Construction" >
< label class = "form-check-label" for = "industry-construction" >
< i class = "fa-solid fa-person-digging" > < / i > Construction
< / label >
< / div >
< div class = "form-check" >
< input class = "form-check-input" type = "radio" name = "industry_sector" id = "industry-wholesale" value = "Wholesale and retail trade; repair of motor vehicles and motorcycles" >
< label class = "form-check-label" for = "industry-wholesale" >
< i class = "fa-solid fa-store" > < / i > Wholesale and retail trade; repair of motor vehicles and motorcycles
< / label >
< / div >
< div class = "form-check" >
< input class = "form-check-input" type = "radio" name = "industry_sector" id = "industry-transportation" value = "Transportation and storage" >
< label class = "form-check-label" for = "industry-transportation" >
< i class = "fa-solid fa-truck" > < / i > Transportation and storage
< / label >
< / div >
< div class = "form-check" >
< input class = "form-check-input" type = "radio" name = "industry_sector" id = "industry-accommodation" value = "Accommodation and food service activities" >
< label class = "form-check-label" for = "industry-accommodation" >
< i class = "fa-solid fa-hotel" > < / i > Accommodation and food service activities
< / label >
< / div >
< div class = "form-check" >
< input class = "form-check-input" type = "radio" name = "industry_sector" id = "industry-information" value = "Information and communication" >
< label class = "form-check-label" for = "industry-information" >
< i class = "fa-solid fa-satellite-dish" > < / i > Information and communication
< / label >
< / div >
< div class = "form-check" >
< input class = "form-check-input" type = "radio" name = "industry_sector" id = "industry-financial" value = "Financial institutions" >
< label class = "form-check-label" for = "industry-financial" >
< i class = "fa-solid fa-building-columns" > < / i > Financial institutions
< / label >
< / div >
< div class = "form-check" >
< input class = "form-check-input" type = "radio" name = "industry_sector" id = "industry-realestate" value = "Renting, buying and selling of real estate" >
< label class = "form-check-label" for = "industry-realestate" >
< i class = "fa-solid fa-house-chimney" > < / i > Renting, buying and selling of real estate
< / label >
< / div >
< div class = "form-check" >
< input class = "form-check-input" type = "radio" name = "industry_sector" id = "industry-consultancy" value = "Consultancy, research and other specialised business services" >
< label class = "form-check-label" for = "industry-consultancy" >
< i class = "fa-solid fa-user-tie" > < / i > Consultancy, research and other specialised business services
< / label >
< / div >
< div class = "form-check" >
< input class = "form-check-input" type = "radio" name = "industry_sector" id = "industry-leasing" value = "Renting and leasing of tangible goods and other business support services" >
< label class = "form-check-label" for = "industry-leasing" >
< i class = "fa-solid fa-truck-moving" > < / i > Renting and leasing of tangible goods and other business support services
< / label >
< / div >
< div class = "form-check" >
< input class = "form-check-input" type = "radio" name = "industry_sector" id = "industry-public" value = "Public administration, public services and compulsory social security" >
< label class = "form-check-label" for = "industry-public" >
< i class = "fa-solid fa-landmark-flag" > < / i > Public administration, public services and compulsory social security
< / label >
< / div >
< div class = "form-check" >
< input class = "form-check-input" type = "radio" name = "industry_sector" id = "industry-education" value = "Education" >
< label class = "form-check-label" for = "industry-education" >
< i class = "fa-solid fa-graduation-cap" > < / i > Education
< / label >
< / div >
< div class = "form-check" >
< input class = "form-check-input" type = "radio" name = "industry_sector" id = "industry-health" value = "Human health and social work activities" >
< label class = "form-check-label" for = "industry-health" >
< i class = "fa-solid fa-notes-medical" > < / i > Human health and social work activities
< / label >
< / div >
< div class = "form-check" >
< input class = "form-check-input" type = "radio" name = "industry_sector" id = "industry-culture" value = "Culture, sports and recreation" >
< label class = "form-check-label" for = "industry-culture" >
< i class = "fa-solid fa-masks-theater" > < / i > Culture, sports and recreation
< / label >
< / div >
< div class = "form-check" >
< input class = "form-check-input" type = "radio" name = "industry_sector" id = "industry-households" value = "Activities of households as employers; undifferentiated goods- and service- producing activities of households for own use" >
< label class = "form-check-label" for = "industry-households" >
< i class = "fa-solid fa-people-roof" > < / i > Activities of households as employers; undifferentiated goods- and service- producing activities of households for own use
< / label >
< / div >
< div class = "form-check" >
< input class = "form-check-input" type = "radio" name = "industry_sector" id = "industry-extraterritorial" value = "Extraterritorial organisations and bodies" >
< label class = "form-check-label" for = "industry-extraterritorial" >
< i class = "fa-solid fa-globe" > < / i > Extraterritorial organisations and bodies
< / label >
< / div >
< div class = "form-check other-gap" >
< input class = "form-check-input" type = "radio" name = "industry_sector" id = "industry-other-services" value = "Other service activities" >
< label class = "form-check-label" for = "industry-other-services" >
< i class = "fa-solid fa-ellipsis" > < / i > Other service activities
< / label >
< input type = "text" class = "form-control mt-2" name = "industry_sector_other" id = "industry-sector-other-text" placeholder = "If Other, please specify" >
2025-04-24 12:53:26 +02:00
< / div >
< small class = "form-text text-muted py-3" >
Determines industry-specific threats, regulations, and security best practices applicable to your business.
< / small >
2024-12-29 03:44:52 +01:00
< / div >
<!-- IT Dependency -->
2025-05-13 15:04:12 +02:00
< div class = "mb-3 question basic-section" id = "q6" >
2025-04-24 12:53:26 +02:00
< label class = "form-label mt-3" >
Business Operations Dependence on Technology:
< br >
< small class = "form-text text-muted" >
Select the statement describing impact of 24-hour core IT outage - Direct measure of operational risk
< / small >
< / label >
2024-12-29 03:44:52 +01:00
< hr >
2025-04-24 12:53:26 +02:00
< div class = "pb-3" >
< div class = "form-check" >
< input class = "form-check-input" type = "radio" name = "it_dependency" id = "it-minimal" value = "minimal" required >
< label class = "form-check-label" for = "it-minimal" >
2025-06-09 13:48:34 +02:00
< i class = "fa-solid fa-person-walking" > < / i > Minimal Disruption: Operations largely continue manually.
2025-04-24 12:53:26 +02:00
< / label >
< / div >
< div class = "form-check" >
< input class = "form-check-input" type = "radio" name = "it_dependency" id = "it-significant" value = "significant" >
< label class = "form-check-label" for = "it-significant" >
2025-06-09 13:48:34 +02:00
< i class = "fa-solid fa-triangle-exclamation" > < / i > Significant Operational Impact: Core processes severely hindered.
2025-04-24 12:53:26 +02:00
< / label >
< / div >
< div class = "form-check" >
< input class = "form-check-input" type = "radio" name = "it_dependency" id = "it-major" value = "major" >
< label class = "form-check-label" for = "it-major" >
2025-06-09 13:48:34 +02:00
< i class = "fa-solid fa-sack-xmark" > < / i > Major Revenue Loss / Service Delivery Failure: Critical functions cease.
2025-04-24 12:53:26 +02:00
< / label >
< / div >
< div class = "form-check" >
< input class = "form-check-input" type = "radio" name = "it_dependency" id = "it-continuity" value = "continuity-threatened" >
< label class = "form-check-label" for = "it-continuity" >
2025-06-09 13:48:34 +02:00
< i class = "fa-solid fa-ban" > < / i > Business Continuity Threatened: Organization cannot function.
2025-04-24 12:53:26 +02:00
< / label >
< / div >
2024-12-29 03:44:52 +01:00
< / div >
< small class = "form-text text-muted py-3" > Measures the potential business impact of IT disruptions
and
helps prioritize security investments.< / small >
< / div >
2025-04-24 12:53:26 +02:00
<!-- Sensitive Data Level -->
2025-05-13 15:04:12 +02:00
< div class = "mb-3 question basic-section" id = "q7" >
2025-04-24 12:53:26 +02:00
< label class = "form-label mt-3" >
Sensitive Data Handled:
< br >
< small class = "form-text text-muted" >
Select all applicable categories - Core risk driver
< / small >
< / label >
2024-12-29 03:44:52 +01:00
< hr >
< div class = "pb-3" >
< div class = "form-check" >
2025-04-24 12:53:26 +02:00
< input class = "form-check-input" type = "checkbox" name = "sensitive_data" id = "data-customer-pii" value = "customer-pii" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "data-customer-pii" >
< i class = "fa-solid fa-id-card" > < / i > Customer Personally Identifiable Information (PII - e.g., names, addresses, email)
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
2025-04-24 12:53:26 +02:00
< input class = "form-check-input" type = "checkbox" name = "sensitive_data" id = "data-employee-pii" value = "employee-pii" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "data-employee-pii" >
< i class = "fa-solid fa-user-tie" > < / i > Employee Personally Identifiable Information (PII)
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
2025-04-24 12:53:26 +02:00
< input class = "form-check-input" type = "checkbox" name = "sensitive_data" id = "data-phi" value = "phi" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "data-phi" >
< i class = "fa-solid fa-notes-medical" > < / i > Protected Health Information (PHI)
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
2025-04-24 12:53:26 +02:00
< input class = "form-check-input" type = "checkbox" name = "sensitive_data" id = "data-pci" value = "pci" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "data-pci" >
< i class = "fa-solid fa-credit-card" > < / i > Payment Card Industry Data (PCI-DSS Scope)
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
2025-04-24 12:53:26 +02:00
< input class = "form-check-input" type = "checkbox" name = "sensitive_data" id = "data-financial" value = "financial" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "data-financial" >
< i class = "fa-solid fa-file-invoice-dollar" > < / i > Confidential Financial Information (Non-PCI)
< / label >
2025-04-24 12:53:26 +02:00
< / div >
< div class = "form-check" >
< input class = "form-check-input" type = "checkbox" name = "sensitive_data" id = "data-ip" value = "ip" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "data-ip" >
< i class = "fa-solid fa-lightbulb" > < / i > Intellectual Property / Trade Secrets / R& D Data
< / label >
2025-04-24 12:53:26 +02:00
< / div >
< div class = "form-check" >
< input class = "form-check-input" type = "checkbox" name = "sensitive_data" id = "data-strategy" value = "strategy" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "data-strategy" >
< i class = "fa-solid fa-chess-king" > < / i > Sensitive Business Strategy / M& A Data
< / label >
2025-04-24 12:53:26 +02:00
< / div >
< div class = "form-check" >
< input class = "form-check-input" type = "checkbox" name = "sensitive_data" id = "data-gov" value = "government" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "data-gov" >
< i class = "fa-solid fa-user-shield" > < / i > Government Classified / Controlled Unclassified Information (CUI)
< / label >
2025-04-24 12:53:26 +02:00
< / div >
< div class = "form-check" >
< input class = "form-check-input" type = "checkbox" name = "sensitive_data" id = "data-ot" value = "ot" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "data-ot" >
< i class = "fa-solid fa-microchip" > < / i > Critical Operational Technology (OT) Data
< / label >
2025-04-24 12:53:26 +02:00
< / div >
< div class = "form-check" >
< input class = "form-check-input" type = "checkbox" name = "sensitive_data" id = "data-none" value = "none" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "data-none" >
< i class = "fa-solid fa-circle-xmark" > < / i > None / Minimal Sensitive Data Handled
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< / div >
< small class = "form-text text-muted py-3" > Assesses the potential impact of data breaches and
determines
required security controls.< / small >
< / div >
2025-04-24 12:53:26 +02:00
<!-- Overall Sensitivity Level of Data Processed -->
2025-05-13 15:04:12 +02:00
< div class = "mb-3 question basic-section" id = "q8" >
2025-04-24 12:53:26 +02:00
< label class = "form-label mt-3" >
Overall Sensitivity Level of Data Processed:
< br >
< small class = "form-text text-muted" >
Select one - Subjective rating of value/impact
< / small >
< / label >
< hr >
< div class = "pb-3" >
< div class = "form-check" >
< input class = "form-check-input" type = "radio" name = "data_sensitivity" id = "sensitivity-low" value = "low" required >
< label class = "form-check-label" for = "sensitivity-low" >
2025-06-09 13:48:34 +02:00
< i class = "fa-solid fa-unlock" > < / i > Low (Primarily public or non-sensitive internal data)
2025-04-24 12:53:26 +02:00
< / label >
< / div >
< div class = "form-check" >
< input class = "form-check-input" type = "radio" name = "data_sensitivity" id = "sensitivity-medium" value = "medium" >
< label class = "form-check-label" for = "sensitivity-medium" >
2025-06-09 13:48:34 +02:00
< i class = "fa-solid fa-lock-open" > < / i > Medium (Some confidential business data, basic PII)
2025-04-24 12:53:26 +02:00
< / label >
< / div >
< div class = "form-check" >
< input class = "form-check-input" type = "radio" name = "data_sensitivity" id = "sensitivity-high" value = "high" >
< label class = "form-check-label" for = "sensitivity-high" >
2025-06-09 13:48:34 +02:00
< i class = "fa-solid fa-lock" > < / i > High (Significant PII/PHI, Financial Data, Critical IP)
2025-04-24 12:53:26 +02:00
< / label >
< / div >
< div class = "form-check" >
< input class = "form-check-input" type = "radio" name = "data_sensitivity" id = "sensitivity-very-high" value = "very-high" >
< label class = "form-check-label" for = "sensitivity-very-high" >
2025-06-09 13:48:34 +02:00
< i class = "fa-solid fa-vault" > < / i > Very High (Large volumes of highly sensitive data, regulated data, "crown jewel" IP)
2025-04-24 12:53:26 +02:00
< / label >
< / div >
< / div >
< small class = "form-text text-muted py-3" >
Subjective rating of the value and impact of the data your organization processes.
< / small >
< / div >
<!-- Intellectual Property (IP) Value -->
2025-05-13 15:04:12 +02:00
< div class = "mb-3 question basic-section" id = "q9" >
2025-04-24 12:53:26 +02:00
< label class = "form-label mt-3" >
Intellectual Property (IP) Value:
< br >
< small class = "form-text text-muted" >
Select best description of IP's importance to the business model
< / small >
< / label >
2024-12-29 03:44:52 +01:00
< hr >
< div class = "pb-3" >
< div class = "form-check" >
2025-04-24 12:53:26 +02:00
< input class = "form-check-input" type = "radio" name = "ip_value" id = "ip-value-low" value = "low" required >
< label class = "form-check-label" for = "ip-value-low" >
2025-06-09 13:48:34 +02:00
< i class = "fa-regular fa-circle" > < / i > Low: IP is not a significant differentiator or revenue driver.
2025-04-24 12:53:26 +02:00
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
2025-04-24 12:53:26 +02:00
< input class = "form-check-input" type = "radio" name = "ip_value" id = "ip-value-medium" value = "medium" >
< label class = "form-check-label" for = "ip-value-medium" >
2025-06-09 13:48:34 +02:00
< i class = "fa-solid fa-lightbulb" > < / i > Medium: IP provides some competitive advantage or supports core products.
2025-04-24 12:53:26 +02:00
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
2025-04-24 12:53:26 +02:00
< input class = "form-check-input" type = "radio" name = "ip_value" id = "ip-value-high" value = "high" >
< label class = "form-check-label" for = "ip-value-high" >
2025-06-09 13:48:34 +02:00
< i class = "fa-solid fa-chess-king" > < / i > High: IP is a primary source of competitive advantage and revenue.
2025-04-24 12:53:26 +02:00
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
2025-04-24 12:53:26 +02:00
< input class = "form-check-input" type = "radio" name = "ip_value" id = "ip-value-critical" value = "critical" >
< label class = "form-check-label" for = "ip-value-critical" >
2025-06-09 13:48:34 +02:00
< i class = "fa-solid fa-gem" > < / i > Critical: Business model is fundamentally based on unique, high-value IP.
2025-04-24 12:53:26 +02:00
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< / div >
2025-04-24 12:53:26 +02:00
< small class = "form-text text-muted py-3" >
Indicates the strategic importance of intellectual property to your organization.
< / small >
2024-12-29 03:44:52 +01:00
< / div >
<!-- Remote Workforce Percentage -->
2025-05-13 15:04:12 +02:00
< div class = "mb-3 question basic-section" id = "q10" >
2024-12-29 03:44:52 +01:00
< label class = "form-label mt-3" > What percentage of your workforce operates remotely?< / label >
< hr >
< div class = "pb-3" >
< div class = "form-check" >
2025-06-09 13:48:34 +02:00
< input class = "form-check-input" type = "radio" name = "remote_workforce_percentage" id = "remote-none" value = "none" required >
< label class = "form-check-label" for = "remote-none" >
< i class = "fa-solid fa-building-user" > < / i > None
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
2025-06-09 13:48:34 +02:00
< input class = "form-check-input" type = "radio" name = "remote_workforce_percentage" id = "remote-1-10" value = "1-10" >
< label class = "form-check-label" for = "remote-1-10" >
< i class = "fa-solid fa-user-house" > < / i > 1-10%
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
2025-06-09 13:48:34 +02:00
< input class = "form-check-input" type = "radio" name = "remote_workforce_percentage" id = "remote-above-10" value = "above-10" >
< label class = "form-check-label" for = "remote-above-10" >
< i class = "fa-solid fa-people-roof" > < / i > Above 10%
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
2025-06-09 13:48:34 +02:00
< input class = "form-check-input" type = "radio" name = "remote_workforce_percentage" id = "remote-unknown" value = "unknown" >
< label class = "form-check-label" for = "remote-unknown" >
< i class = "fa-solid fa-question-circle" > < / i > I don't know
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< / div >
< small class = "form-text text-muted py-3" > Evaluates remote access security requirements and potential
exposure to external threats.< / small >
< / div >
<!-- Third - Party Vendor Access -->
2025-05-13 15:04:12 +02:00
< div class = "mb-3 question basic-section" id = "q11" >
2024-12-29 03:44:52 +01:00
< label class = "form-label mt-3" > How many third-party vendors have access to your systems?< / label >
< hr >
< div class = "pb-3" >
< div class = "form-check" >
2025-06-09 13:48:34 +02:00
< input class = "form-check-input" type = "radio" name = "third_party_vendor_access" id = "vendor-none" value = "none" required >
< label class = "form-check-label" for = "vendor-none" >
< i class = "fa-solid fa-ban" > < / i > None
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
2025-06-09 13:48:34 +02:00
< input class = "form-check-input" type = "radio" name = "third_party_vendor_access" id = "vendor-1-5" value = "1-5" >
< label class = "form-check-label" for = "vendor-1-5" >
< i class = "fa-solid fa-handshake" > < / i > 1-5
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
2025-06-09 13:48:34 +02:00
< input class = "form-check-input" type = "radio" name = "third_party_vendor_access" id = "vendor-more-than-5" value = "more-than-5" >
< label class = "form-check-label" for = "vendor-more-than-5" >
< i class = "fa-solid fa-people-group" > < / i > More than 5
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
2025-06-09 13:48:34 +02:00
< input class = "form-check-input" type = "radio" name = "third_party_vendor_access" id = "vendor-unknown" value = "unknown" >
< label class = "form-check-label" for = "vendor-unknown" >
< i class = "fa-solid fa-question-circle" > < / i > I don't know
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< / div >
< small class = "form-text text-muted py-3" > Assesses supply chain risk and the need for vendor security
management.< / small >
< / div >
<!-- Internal Software Development -->
2025-05-13 15:04:12 +02:00
< div class = "mb-3 question basic-section" id = "q12" >
2025-04-24 12:53:26 +02:00
< label class = "form-label mt-3" >
Internal Software Development for Critical Applications:
< br >
< small class = "form-text text-muted" >
Select one - Potential for introducing vulnerabilities
< / small >
< / label >
2024-12-29 03:44:52 +01:00
< hr >
< div class = "pb-3" >
< div class = "form-check" >
2025-04-24 12:53:26 +02:00
< input class = "form-check-input" type = "radio" name = "internal_software_development" id = "dev-none" value = "none" required >
< label class = "form-check-label" for = "dev-none" >
2025-06-09 13:48:34 +02:00
< i class = "fa-solid fa-ban" > < / i > No internal development of critical business applications.
2025-04-24 12:53:26 +02:00
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
< input class = "form-check-input" type = "radio" name = "internal_software_development" id = "dev-some" value = "some" >
2025-04-24 12:53:26 +02:00
< label class = "form-check-label" for = "dev-some" >
2025-06-09 13:48:34 +02:00
< i class = "fa-solid fa-code" > < / i > Yes, some critical business applications are developed internally.
2025-04-24 12:53:26 +02:00
< / label >
2024-12-29 03:44:52 +01:00
< / div >
2025-04-24 12:53:26 +02:00
< / div >
< small class = "form-text text-muted py-3" > Determines the need for secure development practices and
application security measures.< / small >
< / div >
<!-- IT Infrastructure Model -->
2025-05-13 15:04:12 +02:00
< div class = "mb-3 question basic-section" id = "q13" >
2025-04-24 12:53:26 +02:00
< label class = "form-label mt-3" > What is your primary IT infrastructure model?< / label >
< hr >
< div class = "pb-3" >
2024-12-29 03:44:52 +01:00
< div class = "form-check" >
2025-06-09 13:48:34 +02:00
< input class = "form-check-input" type = "checkbox" name = "it_infrastructure" id = "it-on-prem" value = "on-premises" >
< label class = "form-check-label" for = "it-on-prem" >
< i class = "fa-solid fa-server" > < / i > On-premises systems
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
2025-06-09 13:48:34 +02:00
< input class = "form-check-input" type = "checkbox" name = "it_infrastructure" id = "it-cloud" value = "cloud-based" >
< label class = "form-check-label" for = "it-cloud" >
< i class = "fa-solid fa-cloud" > < / i > Cloud-based systems
< / label >
2025-04-24 12:53:26 +02:00
< / div >
< div class = "form-check" >
2025-06-09 13:48:34 +02:00
< input class = "form-check-input" type = "checkbox" name = "it_infrastructure" id = "it-hybrid" value = "hybrid" >
< label class = "form-check-label" for = "it-hybrid" >
< i class = "fa-solid fa-diagram-project" > < / i > Hybrid infrastructure
< / label >
2025-04-24 12:53:26 +02:00
< / div >
< div class = "form-check" >
2025-06-09 13:48:34 +02:00
< input class = "form-check-input" type = "checkbox" name = "it_infrastructure" id = "it-legacy" value = "legacy" >
< label class = "form-check-label" for = "it-legacy" >
< i class = "fa-solid fa-computer" > < / i > Legacy systems
< / label >
2025-04-24 12:53:26 +02:00
< / div >
< div class = "form-check" >
2025-06-09 13:48:34 +02:00
< input class = "form-check-input" type = "checkbox" name = "it_infrastructure" id = "it-modern" value = "modern" >
< label class = "form-check-label" for = "it-modern" >
< i class = "fa-solid fa-microchip" > < / i > Modern architecture
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< / div >
2025-04-24 12:53:26 +02:00
< small class = "form-text text-muted py-3" > Determines specific cybersecurity controls.< / small >
2024-12-29 03:44:52 +01:00
< / div >
2025-04-24 12:53:26 +02:00
<!-- Network Infrastructure Model -->
2025-08-11 22:59:24 +02:00
< div class = "mb-3 question basic-section" id = "q14" >
2025-04-24 12:53:26 +02:00
< label class = "form-label mt-3" >
Network Infrastructure Model:
< br >
< small class = "form-text text-muted" >
Select the primary model - Different inherent risks associated with each
< / small >
< / label >
< hr >
< div class = "pb-3" >
< div class = "form-check" >
< input class = "form-check-input" type = "radio" name = "network_infrastructure" id = "network-onprem" value = "on-premise" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "network-onprem" >
< i class = "fa-solid fa-server" > < / i > Primarily On-Premise Data Centers
< / label >
2025-04-24 12:53:26 +02:00
< / div >
< div class = "form-check" >
< input class = "form-check-input" type = "radio" name = "network_infrastructure" id = "network-cloud" value = "cloud" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "network-cloud" >
< i class = "fa-solid fa-cloud" > < / i > Primarily Cloud-Based (IaaS, PaaS, SaaS)
< / label >
2025-04-24 12:53:26 +02:00
< / div >
< div class = "form-check" >
< input class = "form-check-input" type = "radio" name = "network_infrastructure" id = "network-hybrid" value = "hybrid" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "network-hybrid" >
< i class = "fa-solid fa-diagram-project" > < / i > Hybrid (Significant mix of On-Premise and Cloud)
< / label >
2025-04-24 12:53:26 +02:00
< / div >
< div class = "form-check" >
< input class = "form-check-input" type = "radio" name = "network_infrastructure" id = "network-ot" value = "ot-ics" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "network-ot" >
< i class = "fa-solid fa-industry" > < / i > Primarily Operational Technology (OT) / Industrial Control Systems (ICS)
< / label >
2025-04-24 12:53:26 +02:00
< / div >
< div class = "form-check" >
< input class = "form-check-input" type = "radio" name = "network_infrastructure" id = "network-complex" value = "complex-mix" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "network-complex" >
< i class = "fa-solid fa-network-wired" > < / i > Complex Multi-Cloud / Hybrid / OT mix
< / label >
2025-04-24 12:53:26 +02:00
< / div >
< / div >
< small class = "form-text text-muted py-3" > Helps understand the complexity and vulnerability points in
your
technical environment.< / small >
< / div >
2024-12-29 03:44:52 +01:00
2025-04-24 12:53:26 +02:00
<!-- Geographic Operational Scope -->
2025-08-11 22:59:24 +02:00
< div class = "mb-3 question basic-section" id = "q15" >
2025-04-24 12:53:26 +02:00
< label class = "form-label mt-3" >
Geographic Operational Scope:
< br >
< small class = "form-text text-muted" >
Select the best description - Complexity, regulatory diversity, geopolitical risk
< / small >
< / label >
2024-12-29 03:44:52 +01:00
< hr >
< div class = "pb-3" >
< div class = "form-check" >
2025-04-24 12:53:26 +02:00
< input class = "form-check-input" type = "radio" name = "geographic_scope" id = "geo-single-country" value = "single-country" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "geo-single-country" >
< i class = "fa-solid fa-location-dot" > < / i > Single Country / Region
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
2025-04-24 12:53:26 +02:00
< input class = "form-check-input" type = "radio" name = "geographic_scope" id = "geo-multi-country" value = "multi-country" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "geo-multi-country" >
< i class = "fa-solid fa-earth-europe" > < / i > Multiple Countries within one Continent
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
2025-04-24 12:53:26 +02:00
< input class = "form-check-input" type = "radio" name = "geographic_scope" id = "geo-multi-continent" value = "multi-continent" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "geo-multi-continent" >
< i class = "fa-solid fa-globe" > < / i > Multiple Continents
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
< input class = "form-check-input" type = "radio" name = "geographic_scope" id = "geo-global" value = "global" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "geo-global" >
< i class = "fa-solid fa-earth-americas" > < / i > Global
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< / div >
< small class = "form-text text-muted py-3" > Determines exposure to different cybersecurity
regulations.< / small >
< / div >
2025-04-24 12:53:26 +02:00
<!-- Customer Base Distribution -->
2025-08-11 22:59:24 +02:00
< div class = "mb-3 question basic-section" id = "q16" >
2025-04-24 12:53:26 +02:00
< label class = "form-label mt-3" >
Customer Base Distribution:
< br >
< small class = "form-text text-muted" >
Select best description - Concentration risk
< / small >
< / label >
2024-12-29 03:44:52 +01:00
< hr >
< div class = "pb-3" >
< div class = "form-check" >
2025-04-24 12:53:26 +02:00
< input class = "form-check-input" type = "radio" name = "customer_base" id = "customer-highly-concentrated" value = "highly-concentrated" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "customer-highly-concentrated" >
< i class = "fa-solid fa-users-between-lines" > < / i > Highly Concentrated (Few large customers)
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
2025-04-24 12:53:26 +02:00
< input class = "form-check-input" type = "radio" name = "customer_base" id = "customer-moderately-distributed" value = "moderately-distributed" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "customer-moderately-distributed" >
< i class = "fa-solid fa-users" > < / i > Moderately Distributed
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
2025-04-24 12:53:26 +02:00
< input class = "form-check-input" type = "radio" name = "customer_base" id = "customer-highly-distributed" value = "highly-distributed" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "customer-highly-distributed" >
< i class = "fa-solid fa-people-group" > < / i > Highly Distributed (Many small customers)
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< / div >
< small class = "form-text text-muted py-3" > Assesses potential impact of data breaches.< / small >
< / div >
<!-- Primary Customer Type -->
2025-08-11 22:59:24 +02:00
< div class = "mb-3 question basic-section" id = "q17" >
2025-04-24 12:53:26 +02:00
< label class = "form-label mt-3" >
Primary Customer Type:
< br >
< small class = "form-text text-muted" >
Select one - Nature of data handled, potential impact group
< / small >
< / label >
2024-12-29 03:44:52 +01:00
< hr >
< div class = "pb-3" >
< div class = "form-check" >
2025-04-24 12:53:26 +02:00
< input class = "form-check-input" type = "radio" name = "customer_type" id = "customer-b2c" value = "b2c" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "customer-b2c" >
< i class = "fa-solid fa-user" > < / i > Consumers (B2C)
< / label >
2025-04-24 12:53:26 +02:00
< / div >
< div class = "form-check" >
< input class = "form-check-input" type = "radio" name = "customer_type" id = "customer-b2b" value = "b2b" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "customer-b2b" >
< i class = "fa-solid fa-briefcase" > < / i > Businesses (B2B)
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
2025-04-24 12:53:26 +02:00
< input class = "form-check-input" type = "radio" name = "customer_type" id = "customer-b2g" value = "b2g" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "customer-b2g" >
< i class = "fa-solid fa-landmark" > < / i > Government Agencies (B2G)
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
2025-04-24 12:53:26 +02:00
< input class = "form-check-input" type = "radio" name = "customer_type" id = "customer-mix" value = "mix" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "customer-mix" >
< i class = "fa-solid fa-layer-group" > < / i > Mix of B2C / B2B
< / label >
2025-04-24 12:53:26 +02:00
< / div >
< div class = "form-check" >
< input class = "form-check-input" type = "radio" name = "customer_type" id = "customer-internal" value = "internal" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "customer-internal" >
< i class = "fa-solid fa-users-gear" > < / i > Internal (e.g., Shared Service)
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< / div >
< small class = "form-text text-muted py-3" > Defines data protection requirements.< / small >
< / div >
<!-- Product/Service Portfolio -->
2025-08-11 22:59:24 +02:00
< div class = "mb-3 question basic-section" id = "q18" >
2025-04-24 12:53:26 +02:00
< label class = "form-label mt-3" >
Product/Service Portfolio Diversity:
< br >
< small class = "form-text text-muted" >
Select best description - Impact concentration
< / small >
< / label >
2024-12-29 03:44:52 +01:00
< hr >
< div class = "pb-3" >
< div class = "form-check" >
2025-04-24 12:53:26 +02:00
< input class = "form-check-input" type = "radio" name = "product_portfolio" id = "portfolio-focused" value = "focused" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "portfolio-focused" >
< i class = "fa-solid fa-bullseye" > < / i > Highly Focused (1-2 core products/services)
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
2025-04-24 12:53:26 +02:00
< input class = "form-check-input" type = "radio" name = "product_portfolio" id = "portfolio-moderate" value = "moderate" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "portfolio-moderate" >
< i class = "fa-solid fa-layer-group" > < / i > Moderately Diversified
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
2025-04-24 12:53:26 +02:00
< input class = "form-check-input" type = "radio" name = "product_portfolio" id = "portfolio-diversified" value = "diversified" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "portfolio-diversified" >
< i class = "fa-solid fa-shapes" > < / i > Highly Diversified Portfolio
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< / div >
< small class = "form-text text-muted py-3" > Indicates the variety of systems requiring
protection.< / small >
< / div >
<!-- Supplier Base Structure -->
2025-08-11 22:59:24 +02:00
< div class = "mb-3 question basic-section" id = "q19" >
2025-04-24 12:53:26 +02:00
< label class = "form-label mt-3" >
Dependency on Critical Suppliers:
< br >
< small class = "form-text text-muted" >
How dependent is your core operation on a small number of critical suppliers (non-IT or IT)?
< / small >
< / label >
2024-12-29 03:44:52 +01:00
< hr >
< div class = "pb-3" >
< div class = "form-check" >
2025-04-24 12:53:26 +02:00
< input class = "form-check-input" type = "radio" name = "supplier_base" id = "supplier-low" value = "low" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "supplier-low" >
< i class = "fa-solid fa-people-group" > < / i > Low Dependency / Many alternatives available.
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
2025-04-24 12:53:26 +02:00
< input class = "form-check-input" type = "radio" name = "supplier_base" id = "supplier-moderate" value = "moderate" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "supplier-moderate" >
< i class = "fa-solid fa-handshake" > < / i > Moderate Dependency / Some critical suppliers, but alternatives exist.
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
2025-04-24 12:53:26 +02:00
< input class = "form-check-input" type = "radio" name = "supplier_base" id = "supplier-high" value = "high" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "supplier-high" >
< i class = "fa-solid fa-link" > < / i > High Dependency / Reliant on a few critical suppliers with limited alternatives.
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< / div >
< small class = "form-text text-muted py-3" > Assesses third-party cybersecurity risks.< / small >
< / div >
<!-- Intellectual Property Protection -->
2025-08-11 22:59:24 +02:00
< div class = "mb-3 question basic-section" id = "q20" >
2024-12-29 03:44:52 +01:00
< label class = "form-label mt-3" > How does your organization protect and manage intellectual
property?< / label >
< hr >
< div class = "pb-3" >
< div class = "form-check" >
2025-06-09 13:48:34 +02:00
< input class = "form-check-input" type = "checkbox" name = "intellectual_property" id = "ip-patents" value = "patents" >
< label class = "form-check-label" for = "ip-patents" >
< i class = "fa-solid fa-certificate" > < / i > Patents owned
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
2025-06-09 13:48:34 +02:00
< input class = "form-check-input" type = "checkbox" name = "intellectual_property" id = "ip-licensed" value = "licensed-ip" >
< label class = "form-check-label" for = "ip-licensed" >
< i class = "fa-solid fa-file-contract" > < / i > Licensed IP from others
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
2025-06-09 13:48:34 +02:00
< input class = "form-check-input" type = "checkbox" name = "intellectual_property" id = "ip-trade-secrets" value = "trade-secrets" >
< label class = "form-check-label" for = "ip-trade-secrets" >
< i class = "fa-solid fa-user-secret" > < / i > Trade secrets
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
2025-06-09 13:48:34 +02:00
< input class = "form-check-input" type = "checkbox" name = "intellectual_property" id = "ip-joint" value = "joint-ip" >
< label class = "form-check-label" for = "ip-joint" >
< i class = "fa-solid fa-people-arrows" > < / i > Joint IP ownership
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
2025-06-09 13:48:34 +02:00
< input class = "form-check-input" type = "checkbox" name = "intellectual_property" id = "ip-none" value = "no-ip" >
< label class = "form-check-label" for = "ip-none" >
< i class = "fa-solid fa-circle-xmark" > < / i > No significant IP
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< / div >
< small class = "form-text text-muted py-3" > Evaluates cybersecurity needs based on IP
ownership.< / small >
< / div >
<!-- Sensitive Data -->
2025-08-11 22:59:24 +02:00
< div class = "mb-3 question basic-section" id = "q21" >
2024-12-29 03:44:52 +01:00
< label class = "form-label mt-3" > What type of sensitive data does your organization handle?< / label >
< hr >
< div class = "pb-3" >
< div class = "form-check" >
2025-06-09 13:48:34 +02:00
< input class = "form-check-input" type = "checkbox" name = "sensitive_data_types" id = "data-personal" value = "personal" >
< label class = "form-check-label" for = "data-personal" >
< i class = "fa-solid fa-id-card" > < / i > Personal customer data
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
2025-06-09 13:48:34 +02:00
< input class = "form-check-input" type = "checkbox" name = "sensitive_data_types" id = "data-financial-q22" value = "financial" >
< label class = "form-check-label" for = "data-financial-q22" >
< i class = "fa-solid fa-file-invoice-dollar" > < / i > Financial records
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
2025-06-09 13:48:34 +02:00
< input class = "form-check-input" type = "checkbox" name = "sensitive_data_types" id = "data-healthcare" value = "healthcare" >
< label class = "form-check-label" for = "data-healthcare" >
< i class = "fa-solid fa-notes-medical" > < / i > Healthcare information
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
2025-06-09 13:48:34 +02:00
< input class = "form-check-input" type = "checkbox" name = "sensitive_data_types" id = "data-ip-q22" value = "ip-property" >
< label class = "form-check-label" for = "data-ip-q22" >
< i class = "fa-solid fa-lightbulb" > < / i > Intellectual property
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
2025-06-09 13:48:34 +02:00
< input class = "form-check-input" type = "checkbox" name = "sensitive_data_types" id = "data-gov-q22" value = "government" >
< label class = "form-check-label" for = "data-gov-q22" >
< i class = "fa-solid fa-user-shield" > < / i > Government data
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
2025-06-09 13:48:34 +02:00
< input class = "form-check-input" type = "checkbox" name = "sensitive_data_types" id = "data-payment" value = "payment" >
< label class = "form-check-label" for = "data-payment" >
< i class = "fa-solid fa-credit-card" > < / i > Payment card data
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< / div >
< small class = "form-text text-muted py-3" > Identifies compliance frameworks.< / small >
< / div >
<!-- Critical Business Systems -->
2025-08-11 22:59:24 +02:00
< div class = "mb-3 question basic-section" id = "q22" >
2025-04-24 12:53:26 +02:00
< label class = "form-label mt-3" >
Integration of Critical Business Systems:
< br >
< small class = "form-text text-muted" >
Select best description - Complexity, potential cascade failures
< / small >
< / label >
2024-12-29 03:44:52 +01:00
< hr >
< div class = "pb-3" >
< div class = "form-check" >
2025-04-24 12:53:26 +02:00
< input class = "form-check-input" type = "radio" name = "integration_level" id = "integration-low" value = "low" >
< label class = "form-check-label" for = "integration-low" >
2025-06-09 13:48:34 +02:00
< i class = "fa-solid fa-plug-circle-xmark" > < / i > Low: Systems largely operate independently.
2025-04-24 12:53:26 +02:00
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
2025-04-24 12:53:26 +02:00
< input class = "form-check-input" type = "radio" name = "integration_level" id = "integration-moderate" value = "moderate" >
< label class = "form-check-label" for = "integration-moderate" >
2025-06-09 13:48:34 +02:00
< i class = "fa-solid fa-link" > < / i > Moderate: Some key systems integrated (e.g., CRM & ERP).
2025-04-24 12:53:26 +02:00
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
2025-04-24 12:53:26 +02:00
< input class = "form-check-input" type = "radio" name = "integration_level" id = "integration-high" value = "high" >
< label class = "form-check-label" for = "integration-high" >
2025-06-09 13:48:34 +02:00
< i class = "fa-solid fa-network-wired" > < / i > High: Tightly integrated ecosystem, failure in one impacts many.
2025-04-24 12:53:26 +02:00
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< div class = "form-check" >
2025-04-24 12:53:26 +02:00
< input class = "form-check-input" type = "radio" name = "integration_level" id = "integration-complex" value = "complex" >
< label class = "form-check-label" for = "integration-complex" >
2025-06-09 13:48:34 +02:00
< i class = "fa-solid fa-diagram-project" > < / i > Complex: Highly integrated, often involving legacy and modern systems.
2025-04-24 12:53:26 +02:00
< / label >
2024-12-29 03:44:52 +01:00
< / div >
< / div >
< small class = "form-text text-muted py-3" > Evaluates potential for cascade failures.< / small >
< / div >
2025-04-24 12:53:26 +02:00
<!-- Rate of Technology / Business Change -->
2025-08-11 22:59:24 +02:00
< div class = "mb-3 question basic-section" id = "q23" >
2025-04-24 12:53:26 +02:00
< label class = "form-label mt-3" >
Rate of Technology / Business Change:
< br >
< small class = "form-text text-muted" >
Select best description - Higher change rate can increase risk
< / small >
< / label >
< hr >
< div class = "pb-3" >
< div class = "form-check" >
< input class = "form-check-input" type = "radio" name = "change_rate" id = "change-low" value = "low" >
< label class = "form-check-label" for = "change-low" >
2025-06-09 13:48:34 +02:00
< i class = "fa-solid fa-hourglass-half" > < / i > Low: Stable environment, infrequent major changes.
2025-04-24 12:53:26 +02:00
< / label >
< / div >
< div class = "form-check" >
< input class = "form-check-input" type = "radio" name = "change_rate" id = "change-moderate" value = "moderate" >
< label class = "form-check-label" for = "change-moderate" >
2025-06-09 13:48:34 +02:00
< i class = "fa-solid fa-rotate" > < / i > Moderate: Regular updates and some process changes.
2025-04-24 12:53:26 +02:00
< / label >
< / div >
< div class = "form-check" >
< input class = "form-check-input" type = "radio" name = "change_rate" id = "change-high" value = "high" >
< label class = "form-check-label" for = "change-high" >
2025-06-09 13:48:34 +02:00
< i class = "fa-solid fa-bolt" > < / i > High: Frequent major technology rollouts or business model shifts.
2025-04-24 12:53:26 +02:00
< / label >
< / div >
< / div >
< small class = "form-text text-muted py-3" >
Higher change rates can increase risk and require more robust change management.
< / small >
< / div >
<!-- Relevant Threat Actors -->
2025-08-11 22:59:24 +02:00
< div class = "mb-3 question basic-section" id = "q24" >
2025-04-24 12:53:26 +02:00
< label class = "form-label mt-3" >
Relevant Threat Actors:
< br >
< small class = "form-text text-muted" >
Select the Top 2-3 most relevant threat actor types based on your industry/data
< / small >
< / label >
< hr >
< div class = "pb-3" >
< div class = "form-check" >
< input class = "form-check-input" type = "checkbox" name = "threat_actors" id = "threat-cybercriminals" value = "cybercriminals" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "threat-cybercriminals" >
< i class = "fa-solid fa-mask" > < / i > Cybercriminals (financially motivated)
< / label >
2025-04-24 12:53:26 +02:00
< / div >
< div class = "form-check" >
< input class = "form-check-input" type = "checkbox" name = "threat_actors" id = "threat-nation-state" value = "nation-state" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "threat-nation-state" >
< i class = "fa-solid fa-flag" > < / i > Nation-State Actors (espionage, disruption)
< / label >
2025-04-24 12:53:26 +02:00
< / div >
< div class = "form-check" >
< input class = "form-check-input" type = "checkbox" name = "threat_actors" id = "threat-hacktivists" value = "hacktivists" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "threat-hacktivists" >
< i class = "fa-solid fa-bullhorn" > < / i > Hacktivists (ideologically motivated)
< / label >
2025-04-24 12:53:26 +02:00
< / div >
< div class = "form-check" >
< input class = "form-check-input" type = "checkbox" name = "threat_actors" id = "threat-insider" value = "insider" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "threat-insider" >
< i class = "fa-solid fa-user-secret" > < / i > Insider Threats (malicious or accidental)
< / label >
2025-04-24 12:53:26 +02:00
< / div >
< div class = "form-check" >
< input class = "form-check-input" type = "checkbox" name = "threat_actors" id = "threat-competitors" value = "competitors" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "threat-competitors" >
< i class = "fa-solid fa-user-tie" > < / i > Competitors (industrial espionage)
< / label >
2025-04-24 12:53:26 +02:00
< / div >
< div class = "form-check" >
< input class = "form-check-input" type = "checkbox" name = "threat_actors" id = "threat-opportunistic" value = "opportunistic" >
2025-06-09 13:48:34 +02:00
< label class = "form-check-label" for = "threat-opportunistic" >
< i class = "fa-solid fa-bug" > < / i > Opportunistic Attackers (less sophisticated, broad attacks)
< / label >
2025-04-24 12:53:26 +02:00
< / div >
< / div >
< small class = "form-text text-muted py-3" >
Helps prioritize security controls and monitoring based on likely threats.
< / small >
< / div >
2024-12-29 03:44:52 +01:00
< div class = "d-flex justify-content-end mt-4" >
< button type = "button" class = "btn btn-lg btn-outline-secondary me-3" id = "back" > Back< / button >
< button type = "submit" class = "btn btn-primary btn-lg" id = "submit" > Next< / button >
< button type = "button" class = "btn btn-primary btn-lg" id = "next" > Next< / button >
< / div >
< / form >
< / div >
< / div >
< / div >
2025-04-24 12:53:26 +02:00
2024-12-29 03:44:52 +01:00
< script src = "/static/js/formHandling.js" > < / script >
2025-06-09 13:48:34 +02:00
< script src = '/static/js/bootstrap.js' > < / script >
< / body >
