Cybersecurity readiness check — Nodeward Technologies

01

Identity & access

Who can get in, and how easily.

0 / 5

Every account, including email, requires multi-factor authentication. Admin rights are on separate accounts, not used for daily work. Leavers lose all access on their last day. There are no shared logins; each person has their own account. A written list shows who can access which data, reviewed in the last six months.

02

Devices & email

Every laptop, phone and inbox.

0 / 5

Every computer runs a supported operating system (no Windows 10 or older). Updates install automatically, and someone checks that they did. Every device has managed endpoint protection (EDR), not just free antivirus. Your domain publishes SPF, DKIM and DMARC at p=reject. Endpoint and email alerts are reviewed by a person within one business day.

03

Backup & recovery

The day something goes wrong.

0 / 5

Backups run automatically every day. A backup has been restored successfully in the last three months. At least one backup copy is offline or immutable, out of ransomware's reach. Microsoft 365 or Google Workspace data is backed up separately. You know how long it would take to be working again, and it has been tested.

04

Network & perimeter

The infrastructure holding it together.

0 / 5

Firewall rules have been reviewed and documented in the last year. Guest Wi-Fi, staff devices and building systems (CCTV, access control) are on separate networks. Remote Desktop and router admin pages are not reachable from the internet. Remote access uses a VPN or similar, with multi-factor authentication. Systems are scanned for vulnerabilities monthly, and findings are tracked to closure.

05

Governance & compliance

The regulatory reality of the UAE.

0 / 5

You know which frameworks apply to you: UAE IA, PDPL, DHA, or client and insurer requirements. An asset register lists every device and who is responsible for it. A written incident response plan names who does what. You could show an insurer or client evidence of your controls today. Staff email addresses are checked against breach data.

06

People & awareness

First line of defence, or weakest link.

0 / 5

New staff receive security training in their first week. All staff have had security training in the last twelve months. Staff have been tested with a simulated phishing email. Changes to payment or bank details are confirmed by phone, on a known number. Staff know how to report a suspicious email, and are thanked for it.

Where does your security stand?

Identity & access

Devices & email

Backup & recovery

Network & perimeter

Governance & compliance

People & awareness

By area

Close these first