1) Which of the following cyber standards are used in your organization? a) b) ISO 27002 c) NERC d) NIST e) ISO 15408 f) g) ISA-99 2) 3) How do the employees of your organization understand the importance of information security policy? h) i) Screen saver j) By email k) By digital banner at work place l) By floor briefing m) By notice board n) Through learning and development o) By employees portal p) Any Other Process ____________ 4) 5) Which of the following are the types of cyber risk exposures faced by your organization? q) Business partners and contractors that use customer data r) Use of social media for marketing and communications s) Credit card data collection, online payment processing t) Provide online content or media u) E-commerce business websites v) Outsourced computing services w) Medical and patient record keeping x) Cloud computing for storage of data y) Housing private customer data on laptop z) Cloud computing for delivery of services 6)

7) Is the Cyber Security Policy in your organization frequently updated? {) |) Yes }) No 8) How frequently is the