Cyber Risk Assessment: How Well Does Your Organisation Manage Exposure? (Tenable Sarawak)

1) How well do you currently understand and monitor your organisation's complete attack surface, including assets on-premises and in the cloud?

a. Comprehensive understanding and continuous monitoring across on-premises and cloud assets.

b. Moderate understanding with some monitoring measures in place, but there’s room for improvement.

c. Limited understanding, minimal monitoring, and potential blind spots in both on-premises and cloud environments.

2) Is your organisation able to anticipate the consequences of a potential cyber attack, taking into account relationships between assets, exposures, privileges, and threats?

a. Yes, we proactively anticipate consequences by considering relationships between assets, exposures, privileges, and threats.

b. No, we can’t effectively anticipate consequences, and there's limited consideration of relationships between assets, exposures, privileges, and threats.

3) Which of the following best describes your organisation's approach to prioritising and addressing exploitable vulnerabilities, attack pathways, and breach scenarios?

a. We take a robust approach, continuously prioritising and addressing exploitable vulnerabilities, attack pathways, and breach scenarios based on real-world risks.

b. We have a structured approach in place, but it is inadequate and there's room for improvement.

c. Our organisation lacks a structured approach, leading to challenges in prioritising and effectively addressing exploitable vulnerabilities, attack pathways, and breach scenarios.

4) Describe the integration of threat intelligence into measurements of your organisation's exposure to risk.

a. We seamlessly integrate threat intelligence, enhancing our organisation's exposure to risk measurements.

b. There's some integration, but improvements can be made in incorporating threat intelligence into risk measurements.

c. Limited integration of threat intelligence, impacting our organisation's ability to measure exposure to risk effectively.

5) How does your organisation currently communicate cyber risk to different stakeholders, including security executives and practitioners?

a. Our organisation effectively communicates cyber risk to various stakeholders, employing clear strategies for security executives and practitioners.

b. There's an existing communication method, but there's room for improvement in conveying cyber risk to different stakeholders.

c. Communication of cyber risk is limited, and there is a need for better strategies, particularly for security executives and practitioners.

Intelligent Assessment

1) How well do you currently understand and monitor your organisation's complete attack surface, including assets on-premises and in the cloud?

2) Is your organisation able to anticipate the consequences of a potential cyber attack, taking into account relationships between assets, exposures, privileges, and threats?

3) Which of the following best describes your organisation's approach to prioritising and addressing exploitable vulnerabilities, attack pathways, and breach scenarios?

4) Describe the integration of threat intelligence into measurements of your organisation's exposure to risk.

5) How does your organisation currently communicate cyber risk to different stakeholders, including security executives and practitioners?

Thank you for completing the assessment!

We have received your submission, and the results have been sent to the email address you provided.

If you don’t see the email in your inbox, please check your spam or junk folder. Should you encounter any issues or did not receive the email, kindly reach out to us at info@aopg.net, and we will ensure you receive the results directly.

Thank you for your interest in Tenable. We look forward to assisting you further in improving your cybersecurity.