708 lines
43 KiB
HTML
708 lines
43 KiB
HTML
{% extends "base.html" %}
|
|
{% block content %}
|
|
<div class="container">
|
|
<div class="row">
|
|
<div class="col">
|
|
<div class="text-center">
|
|
<img src="/static/img/steps-line.svg" class="img-fluid mt-3" alt="Steps image">
|
|
</div>
|
|
<h1 class="pt-4 mb-4">Risk Assessment Questions</h1>
|
|
<hr>
|
|
<form method="post">
|
|
{% csrf_token %}
|
|
<!-- Organization Name -->
|
|
<div class="mb-3 question" id="q0">
|
|
<label for="name" class="form-label mt-3">What is the name of your organization?</label>
|
|
<hr>
|
|
<div class="pb-3">
|
|
<input type="text" class="form-control" id="name" name="name" required>
|
|
</div>
|
|
<small class="form-text text-muted py-3">Name of the Organization that will appear in the
|
|
report.</small>
|
|
</div>
|
|
|
|
<!-- Email -->
|
|
<div class="mb-3 question" id="q1">
|
|
<label for="email" class="form-label mt-3">What is your email?</label>
|
|
<hr>
|
|
<div class="pb-3">
|
|
<input type="email" class="form-control" id="email" name="email" required>
|
|
</div>
|
|
<small class="form-text text-muted py-3">Email of the person responsible for using Risklet.
|
|
Report
|
|
and
|
|
magic link for login will be sent to this email.</small>
|
|
</div>
|
|
|
|
<!-- Employee Headcount -->
|
|
<div class="mb-3 question" id="q2">
|
|
<label class="form-label mt-3">What is your organization's current employee headcount?</label>
|
|
<hr>
|
|
<div class="pb-3">
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="radio" name="employee_headcount" id="employees-1-10"
|
|
value="1-10" required>
|
|
<label class="form-check-label" for="employees-1-10">1-10</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="radio" name="employee_headcount" id="employees-11-100"
|
|
value="11-100">
|
|
<label class="form-check-label" for="employees-11-100">11-100</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="radio" name="employee_headcount" id="employees-101-10000"
|
|
value="101-10000">
|
|
<label class="form-check-label" for="employees-101-10000">101-10,000</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="radio" name="employee_headcount" id="employees-10001"
|
|
value="10001-">
|
|
<label class="form-check-label" for="employees-10001">10,001+</label>
|
|
</div>
|
|
</div>
|
|
<small class="form-text text-muted py-3">Helps determine the scale of IT infrastructure and security
|
|
needs based on user volume.</small>
|
|
</div>
|
|
|
|
<!-- Annual Revenue -->
|
|
<div class="mb-3 question" id="q3">
|
|
<label class="form-label mt-3">What is your organization's annual revenue range?</label>
|
|
<hr>
|
|
<div class="pb-3">
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="radio" name="annual_revenue" id="revenue-under-1m"
|
|
value="under-1m" required>
|
|
<label class="form-check-label" for="revenue-under-1m">$ under 1M</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="radio" name="annual_revenue" id="revenue-1m-100m"
|
|
value="1m-100m">
|
|
<label class="form-check-label" for="revenue-1m-100m">$ 1M-100M</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="radio" name="annual_revenue" id="revenue-100m-1b"
|
|
value="100m-1b">
|
|
<label class="form-check-label" for="revenue-100m-1b">$ 100M-1B</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="radio" name="annual_revenue" id="revenue-above-1b"
|
|
value="above-1b">
|
|
<label class="form-check-label" for="revenue-above-1b">$ Above 1B</label>
|
|
</div>
|
|
</div>
|
|
<small class="form-text text-muted py-3">Indicates available resources for cybersecurity investments
|
|
and
|
|
helps assess risk appetite.</small>
|
|
</div>
|
|
|
|
<!-- Critical Business Applications -->
|
|
<div class="mb-3 question" id="q4">
|
|
<label class="form-label mt-3">How many critical business applications do your employees use
|
|
daily?</label>
|
|
<hr>
|
|
<div class="pb-3">
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="radio" name="critical_applications" id="apps-1-5" value="1-5"
|
|
required>
|
|
<label class="form-check-label" for="apps-1-5">1-5</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="radio" name="critical_applications" id="apps-5-20"
|
|
value="5-20">
|
|
<label class="form-check-label" for="apps-5-20">5-20</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="radio" name="critical_applications" id="apps-more-than-20"
|
|
value="more-than-20">
|
|
<label class="form-check-label" for="apps-more-than-20">More than 20</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="radio" name="critical_applications" id="apps-unknown"
|
|
value="unknown">
|
|
<label class="form-check-label" for="apps-unknown">I don't know</label>
|
|
</div>
|
|
</div>
|
|
<small class="form-text text-muted py-3">Reveals the complexity of your technology landscape and
|
|
potential attack surface.</small>
|
|
</div>
|
|
|
|
<!-- Regulatory Frameworks -->
|
|
<div class="mb-3 question" id="q5">
|
|
<label class="form-label mt-3">Which regulatory frameworks is your organization required to comply
|
|
with?</label>
|
|
<hr>
|
|
<div class="pb-3">
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="checkbox" name="compliance_frameworks" id="compliance-gdpr"
|
|
value="gdpr">
|
|
<label class="form-check-label" for="compliance-gdpr">GDPR</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="checkbox" name="compliance_frameworks" id="compliance-hipaa"
|
|
value="hipaa">
|
|
<label class="form-check-label" for="compliance-hipaa">HIPAA</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="checkbox" name="compliance_frameworks" id="compliance-pci-dss"
|
|
value="pci-dss">
|
|
<label class="form-check-label" for="compliance-pci-dss">PCI DSS</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="checkbox" name="compliance_frameworks" id="compliance-sox"
|
|
value="sox">
|
|
<label class="form-check-label" for="compliance-sox">SOX</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="checkbox" name="compliance_frameworks" id="compliance-iso-27001"
|
|
value="iso-27001">
|
|
<label class="form-check-label" for="compliance-iso-27001">ISO 27001</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="checkbox" name="compliance_frameworks" id="compliance-ccpa"
|
|
value="ccpa">
|
|
<label class="form-check-label" for="compliance-ccpa">CCPA</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="checkbox" name="compliance_frameworks" id="compliance-nist"
|
|
value="nist">
|
|
<label class="form-check-label" for="compliance-nist">NIST</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="checkbox" name="compliance_frameworks" id="compliance-other"
|
|
value="other">
|
|
<label class="form-check-label" for="compliance-other">Other</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="checkbox" name="compliance_frameworks" id="compliance-unknown"
|
|
value="unknown">
|
|
<label class="form-check-label" for="compliance-unknown">I don't know</label>
|
|
</div>
|
|
</div>
|
|
<small class="form-text text-muted py-3">Identifies mandatory security controls and compliance
|
|
requirements that must be implemented.</small>
|
|
</div>
|
|
|
|
<!-- Industry Sector -->
|
|
<div class="mb-3 question" id="q6">
|
|
<label for="industry" class="form-label mt-3">What is your primary industry sector?</label>
|
|
<hr>
|
|
<select class="form-select" id="industry" name="industry_sector" required>
|
|
<option value="agriculture">Agriculture, food and forestry</option>
|
|
<option value="energy">Energy and mining</option>
|
|
<option value="metal">Basic Metal Production</option>
|
|
<option value="chemical">Chemical industries</option>
|
|
<option value="engineering">Mechanical and electrical engineering</option>
|
|
<option value="transport-equipment">Transport equipment manufacturing</option>
|
|
<option value="textiles">Textiles; clothing; leather; footwear</option>
|
|
<option value="private-services">Private services sectors</option>
|
|
<option value="commerce">Commerce</option>
|
|
<option value="financial">Financial services</option>
|
|
<option value="professional">Professional services</option>
|
|
<option value="hotels">Hotels; tourism; catering</option>
|
|
<option value="media">Media; culture; graphical</option>
|
|
<option value="postal">Postal and telecommunications services</option>
|
|
<option value="infrastructure">Infrastructure</option>
|
|
<option value="construction">Construction</option>
|
|
<option value="education">Education and research</option>
|
|
<option value="health">Health services</option>
|
|
<option value="public-service">Public service</option>
|
|
<option value="utilities">Utilities (water; gas; electricity)</option>
|
|
<option value="shipping">Shipping; ports; fisheries; inland waterways</option>
|
|
<option value="transport">Transport (including civil aviation; railways; road transport)
|
|
</option>
|
|
<option value="unknown">I don't know</option>
|
|
</select>
|
|
<small class="form-text text-muted py-3">Determines industry-specific threats, regulations, and
|
|
security
|
|
best practices applicable to your business.</small>
|
|
</div>
|
|
|
|
<!-- IT Dependency -->
|
|
<div class="mb-3 question" id="q7">
|
|
<label for="it-dependency" class="form-label mt-3">On a scale from 1-10, how dependent is your
|
|
business
|
|
operations on technology?</label>
|
|
<hr>
|
|
<input type="range" class="form-range" id="it-dependency" name="it_dependency" min="1" max="10"
|
|
required>
|
|
<div class="d-flex justify-content-between">
|
|
<span class="text-muted">Not dependent at all</span>
|
|
<span class="text-muted text-end">Heavily dependent</span>
|
|
</div>
|
|
<small class="form-text text-muted py-3">Measures the potential business impact of IT disruptions
|
|
and
|
|
helps prioritize security investments.</small>
|
|
</div>
|
|
|
|
<!-- Sensitive Data Level -->
|
|
<div class="mb-3 question" id="q8">
|
|
<label class="form-label mt-3">What level of sensitive data does your organization process?</label>
|
|
<hr>
|
|
<div class="pb-3">
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="radio" name="data_sensitivity" id="data-public"
|
|
value="public" required>
|
|
<label class="form-check-label" for="data-public">Public</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="radio" name="data_sensitivity" id="data-internal"
|
|
value="internal">
|
|
<label class="form-check-label" for="data-internal">Internal</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="radio" name="data_sensitivity" id="data-sensitive"
|
|
value="sensitive">
|
|
<label class="form-check-label" for="data-sensitive">Sensitive</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="radio" name="data_sensitivity" id="data-confidential"
|
|
value="confidential">
|
|
<label class="form-check-label" for="data-confidential">Confidential</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="radio" name="data_sensitivity" id="data-unknown"
|
|
value="unknown">
|
|
<label class="form-check-label" for="data-unknown">I don't know</label>
|
|
</div>
|
|
</div>
|
|
<small class="form-text text-muted py-3">Assesses the potential impact of data breaches and
|
|
determines
|
|
required security controls.</small>
|
|
</div>
|
|
|
|
<!-- Network Infrastructure Model -->
|
|
<div class="mb-3 question" id="q9">
|
|
<label class="form-label mt-3">What best describes your organization's network infrastructure
|
|
model?</label>
|
|
<hr>
|
|
<div class="pb-3">
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="radio" name="network_infrastructure" id="network-flat"
|
|
value="flat" required>
|
|
<label class="form-check-label" for="network-flat">Flat network</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="radio" name="network_infrastructure" id="network-some"
|
|
value="some-segmentation">
|
|
<label class="form-check-label" for="network-some">Some segmentation</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="radio" name="network_infrastructure"
|
|
id="network-segmented" value="segmented">
|
|
<label class="form-check-label" for="network-segmented">Segmented network</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="radio" name="network_infrastructure" id="network-unknown"
|
|
value="unknown">
|
|
<label class="form-check-label" for="network-unknown">I don't know</label>
|
|
</div>
|
|
</div>
|
|
<small class="form-text text-muted py-3">Helps understand the complexity and vulnerability points in
|
|
your
|
|
technical environment.</small>
|
|
</div>
|
|
|
|
<!-- Remote Workforce Percentage -->
|
|
<div class="mb-3 question" id="q10">
|
|
<label class="form-label mt-3">What percentage of your workforce operates remotely?</label>
|
|
<hr>
|
|
<div class="pb-3">
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="radio" name="remote_workforce_percentage" id="remote-none" value="none"
|
|
required>
|
|
<label class="form-check-label" for="remote-none">None</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="radio" name="remote_workforce_percentage" id="remote-1-10"
|
|
value="1-10">
|
|
<label class="form-check-label" for="remote-1-10">1-10%</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="radio" name="remote_workforce_percentage" id="remote-above-10"
|
|
value="above-10">
|
|
<label class="form-check-label" for="remote-above-10">Above 10%</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="radio" name="remote_workforce_percentage" id="remote-unknown"
|
|
value="unknown">
|
|
<label class="form-check-label" for="remote-unknown">I don't know</label>
|
|
</div>
|
|
</div>
|
|
<small class="form-text text-muted py-3">Evaluates remote access security requirements and potential
|
|
exposure to external threats.</small>
|
|
</div>
|
|
|
|
<!-- Third-Party Vendor Access -->
|
|
<div class="mb-3 question" id="q11">
|
|
<label class="form-label mt-3">How many third-party vendors have access to your systems?</label>
|
|
<hr>
|
|
<div class="pb-3">
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="radio" name="third_party_vendor_access" id="vendor-none"
|
|
value="none" required>
|
|
<label class="form-check-label" for="vendor-none">None</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="radio" name="third_party_vendor_access" id="vendor-1-5"
|
|
value="1-5">
|
|
<label class="form-check-label" for="vendor-1-5">1-5</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="radio" name="third_party_vendor_access" id="vendor-more-than-5"
|
|
value="more-than-5">
|
|
<label class="form-check-label" for="vendor-more-than-5">More than 5</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="radio" name="third_party_vendor_access" id="vendor-unknown"
|
|
value="unknown">
|
|
<label class="form-check-label" for="vendor-unknown">I don't know</label>
|
|
</div>
|
|
</div>
|
|
<small class="form-text text-muted py-3">Assesses supply chain risk and the need for vendor security
|
|
management.</small>
|
|
</div>
|
|
|
|
<!-- Internal Software Development -->
|
|
<div class="mb-3 question" id="q12">
|
|
<label class="form-label mt-3">What is the extent of your internal software development
|
|
activities?</label>
|
|
<hr>
|
|
<div class="pb-3">
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="radio" name="internal_software_development" id="dev-none" value="none"
|
|
required>
|
|
<label class="form-check-label" for="dev-none">None</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="radio" name="internal_software_development" id="dev-some" value="some">
|
|
<label class="form-check-label" for="dev-some">Some internal software development</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="radio" name="internal_software_development" id="dev-significant"
|
|
value="significant">
|
|
<label class="form-check-label" for="dev-significant">Significant internal software
|
|
development</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="radio" name="internal_software_development" id="dev-unknown"
|
|
value="unknown">
|
|
<label class="form-check-label" for="dev-unknown">I don't know</label>
|
|
</div>
|
|
</div>
|
|
<small class="form-text text-muted py-3">Determines the need for secure development practices and
|
|
application security measures.</small>
|
|
</div>
|
|
|
|
|
|
<div class="mb-3 question" id="q13">
|
|
|
|
|
|
<label class="form-label mt-3">We have enough information for a basic report. Would you like to
|
|
provide more
|
|
details ?</label>
|
|
<hr>
|
|
<div class="text-center">
|
|
<div class="text-center pb-3">
|
|
<input class="btn btn-warning btn-lg" type="submit" name="half_submit" id="halfsubmit"
|
|
value="Generate report with basic data. ">
|
|
</div>
|
|
</div>
|
|
<small class="form-text text-muted py-3">Click Next if you want to provide more details. Each
|
|
question is
|
|
optional.</small>
|
|
</div>
|
|
|
|
|
|
<!-- skip rest if needed -->
|
|
|
|
<!-- Geographic Operational Scope -->
|
|
<div class="mb-3 question" id="q14">
|
|
|
|
|
|
<label class="form-label mt-3">What is your organization's geographic operational scope?</label>
|
|
<hr>
|
|
<div class="pb-3">
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="radio" name="geographic_scope" id="geo-single-country"
|
|
value="single-country">
|
|
<label class="form-check-label" for="geo-single-country">Single country</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="radio" name="geographic_scope" id="geo-single-region"
|
|
value="single-region">
|
|
<label class="form-check-label" for="geo-single-region">Multiple countries - Single
|
|
region</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="radio" name="geographic_scope" id="geo-multiple-regions"
|
|
value="multiple-regions">
|
|
<label class="form-check-label" for="geo-multiple-regions">Multiple countries - Multiple
|
|
regions</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="radio" name="geographic_scope" id="geo-global" value="global">
|
|
<label class="form-check-label" for="geo-global">Global operations</label>
|
|
</div>
|
|
</div>
|
|
<small class="form-text text-muted py-3">Determines exposure to different cybersecurity
|
|
regulations.</small>
|
|
</div>
|
|
|
|
|
|
<div class="mb-3 question" id="q15">
|
|
<label class="form-label mt-3">How would you characterize your customer base distribution?</label>
|
|
<hr>
|
|
<div class="pb-3">
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="radio" name="customer_base" id="customer-few-key"
|
|
value="few-key">
|
|
<label class="form-check-label" for="customer-few-key">Few key clients (1-5)</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="radio" name="customer_base" id="customer-moderate"
|
|
value="moderate">
|
|
<label class="form-check-label" for="customer-moderate">Moderate concentration
|
|
(6-20)</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="radio" name="customer_base" id="customer-diverse"
|
|
value="diverse">
|
|
<label class="form-check-label" for="customer-diverse">Diverse customer base (20+)</label>
|
|
</div>
|
|
</div>
|
|
<small class="form-text text-muted py-3">Assesses potential impact of data breaches.</small>
|
|
</div>
|
|
|
|
|
|
<!-- Primary Customer Type -->
|
|
<div class="mb-3 question" id="q16">
|
|
<label class="form-label mt-3">What is your primary customer type?</label>
|
|
<hr>
|
|
<div class="pb-3">
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="radio" name="customer_type" id="customer-b2b"
|
|
value="b2b">
|
|
<label class="form-check-label" for="customer-b2b">Primarily B2B</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="radio" name="customer_type" id="customer-b2c"
|
|
value="b2c">
|
|
<label class="form-check-label" for="customer-b2c">Primarily B2C</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="radio" name="customer_type" id="customer-mixed"
|
|
value="mixed">
|
|
<label class="form-check-label" for="customer-mixed">Mixed B2B/B2C</label>
|
|
</div>
|
|
</div>
|
|
<small class="form-text text-muted py-3">Defines data protection requirements.</small>
|
|
</div>
|
|
|
|
|
|
<!-- Product/Service Portfolio -->
|
|
<div class="mb-3 question" id="q17">
|
|
<label class="form-label mt-3">How diversified is your product/service portfolio?</label>
|
|
<hr>
|
|
<div class="pb-3">
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="radio" name="product_portfolio" id="portfolio-single"
|
|
value="single">
|
|
<label class="form-check-label" for="portfolio-single">Single product/service</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="radio" name="product_portfolio" id="portfolio-2-5"
|
|
value="2-5">
|
|
<label class="form-check-label" for="portfolio-2-5">2-5 products/services</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="radio" name="product_portfolio"
|
|
id="portfolio-more-than-5" value="more-than-5">
|
|
<label class="form-check-label" for="portfolio-more-than-5">More than 5
|
|
products/services</label>
|
|
</div>
|
|
</div>
|
|
<small class="form-text text-muted py-3">Indicates the variety of systems requiring
|
|
protection.</small>
|
|
</div>
|
|
|
|
<!-- Supplier Base Structure -->
|
|
<div class="mb-3 question" id="q18">
|
|
<label class="form-label mt-3">What is your supplier base structure?</label>
|
|
<hr>
|
|
<div class="pb-3">
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="radio" name="supplier_base"
|
|
id="supplier-single-critical" value="single-critical">
|
|
<label class="form-check-label" for="supplier-single-critical">Single/few critical
|
|
suppliers</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="radio" name="supplier_base" id="supplier-moderate"
|
|
value="moderate">
|
|
<label class="form-check-label" for="supplier-moderate">Moderate supplier base</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="radio" name="supplier_base"
|
|
id="supplier-highly-diverse" value="highly-diverse">
|
|
<label class="form-check-label" for="supplier-highly-diverse">Highly diverse supplier
|
|
base</label>
|
|
</div>
|
|
</div>
|
|
<small class="form-text text-muted py-3">Assesses third-party cybersecurity risks.</small>
|
|
</div>
|
|
|
|
<!-- IT Infrastructure Model -->
|
|
<div class="mb-3 question" id="q19">
|
|
<label class="form-label mt-3">What is your primary IT infrastructure model?</label>
|
|
<hr>
|
|
<div class="pb-3">
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="checkbox" name="it_infrastructure" id="it-on-prem"
|
|
value="on-premises">
|
|
<label class="form-check-label" for="it-on-prem">On-premises systems</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="checkbox" name="it_infrastructure" id="it-cloud"
|
|
value="cloud-based">
|
|
<label class="form-check-label" for="it-cloud">Cloud-based systems</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="checkbox" name="it_infrastructure" id="it-hybrid"
|
|
value="hybrid">
|
|
<label class="form-check-label" for="it-hybrid">Hybrid infrastructure</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="checkbox" name="it_infrastructure" id="it-legacy"
|
|
value="legacy">
|
|
<label class="form-check-label" for="it-legacy">Legacy systems</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="checkbox" name="it_infrastructure" id="it-modern"
|
|
value="modern">
|
|
<label class="form-check-label" for="it-modern">Modern architecture</label>
|
|
</div>
|
|
</div>
|
|
<small class="form-text text-muted py-3">Determines specific cybersecurity controls.</small>
|
|
</div>
|
|
|
|
<!-- Intellectual Property Protection -->
|
|
<div class="mb-3 question" id="q20">
|
|
<label class="form-label mt-3">How does your organization protect and manage intellectual
|
|
property?</label>
|
|
<hr>
|
|
<div class="pb-3">
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="checkbox" name="intellectual_property" id="ip-patents"
|
|
value="patents">
|
|
<label class="form-check-label" for="ip-patents">Patents owned</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="checkbox" name="intellectual_property" id="ip-licensed"
|
|
value="licensed-ip">
|
|
<label class="form-check-label" for="ip-licensed">Licensed IP from others</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="checkbox" name="intellectual_property" id="ip-trade-secrets"
|
|
value="trade-secrets">
|
|
<label class="form-check-label" for="ip-trade-secrets">Trade secrets</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="checkbox" name="intellectual_property" id="ip-joint"
|
|
value="joint-ip">
|
|
<label class="form-check-label" for="ip-joint">Joint IP ownership</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="checkbox" name="intellectual_property" id="ip-none"
|
|
value="no-ip">
|
|
<label class="form-check-label" for="ip-none">No significant IP</label>
|
|
</div>
|
|
</div>
|
|
<small class="form-text text-muted py-3">Evaluates cybersecurity needs based on IP
|
|
ownership.</small>
|
|
</div>
|
|
|
|
<!-- Sensitive Data -->
|
|
<div class="mb-3 question" id="q21">
|
|
<label class="form-label mt-3">What type of sensitive data does your organization handle?</label>
|
|
<hr>
|
|
<div class="pb-3">
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="checkbox" name="sensitive_data" id="data-personal"
|
|
value="personal">
|
|
<label class="form-check-label" for="data-personal">Personal customer data</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="checkbox" name="sensitive_data" id="data-financial"
|
|
value="financial">
|
|
<label class="form-check-label" for="data-financial">Financial records</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="checkbox" name="sensitive_data" id="data-healthcare"
|
|
value="healthcare">
|
|
<label class="form-check-label" for="data-healthcare">Healthcare information</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="checkbox" name="sensitive_data" id="data-ip"
|
|
value="ip">
|
|
<label class="form-check-label" for="data-ip">Intellectual property</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="checkbox" name="sensitive_data" id="data-gov"
|
|
value="government">
|
|
<label class="form-check-label" for="data-gov">Government data</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="checkbox" name="sensitive_data" id="data-payment"
|
|
value="payment">
|
|
<label class="form-check-label" for="data-payment">Payment card data</label>
|
|
</div>
|
|
</div>
|
|
<small class="form-text text-muted py-3">Identifies compliance frameworks.</small>
|
|
</div>
|
|
|
|
<!-- Critical Business Systems -->
|
|
<div class="mb-3 question" id="q22">
|
|
<label class="form-label mt-3">How integrated are your critical business systems?</label>
|
|
<hr>
|
|
<div class="pb-3">
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="radio" name="integration_level"
|
|
id="integration-fully-integrated" value="fully-integrated">
|
|
<label class="form-check-label" for="integration-fully-integrated">Fully integrated</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="radio" name="integration_level"
|
|
id="integration-partially-integrated" value="partially-integrated">
|
|
<label class="form-check-label" for="integration-partially-integrated">Partially
|
|
integrated</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="radio" name="integration_level"
|
|
id="integration-mostly-separate" value="mostly-separate">
|
|
<label class="form-check-label" for="integration-mostly-separate">Mostly separate</label>
|
|
</div>
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="radio" name="integration_level"
|
|
id="integration-completely-isolated" value="completely-isolated">
|
|
<label class="form-check-label" for="integration-completely-isolated">Completely
|
|
isolated</label>
|
|
</div>
|
|
</div>
|
|
<small class="form-text text-muted py-3">Evaluates potential for cascade failures.</small>
|
|
</div>
|
|
|
|
<div class="d-flex justify-content-end mt-4">
|
|
<button type="button" class="btn btn-lg btn-outline-secondary me-3" id="back">Back</button>
|
|
<button type="submit" class="btn btn-primary btn-lg" id="submit">Next</button>
|
|
<button type="button" class="btn btn-primary btn-lg" id="next">Next</button>
|
|
</div>
|
|
</form>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
{% endblock content %}
|
|
|
|
{% block bottom %}
|
|
<script src="/static/js/formHandling.js"></script>
|
|
{% endblock bottom %}
|