Up to Date Dev-Ops Practises Is security integrated into your DevOps practices? At what stage of development are your software developers thinking about security?
Adequate Vendor Management Program Do you know which vendors have access to your data, systems, and networks? If so, have you reviewed their security controls?
Handling Client Data Do your employees know how to properly transfer and store client data? Do you have policies and procedures that guide them to properly handle the data? Does anyone have access to information other than on a need-to-know basis?