Basic Red Flag Assessment
During a Basic Red Flag Assessment, the goal is to get a quick baseline of the Cybersecurity capabilities of an organisation. This wil give a baseline of what has already been implemented. It goes over 36 requirements, and mainly on how the organisation handles those requirements.
Topics during a Basic Red Flag Assessment:
- Credentials
- Access Policies
- Risk Assessments
- Risk Management Strategy
- Awareness and Training
- Information Protection Processes and Procedures
- Security Continuous Monitoring
The report of this assessment will give a general idea of the state of affairs for the organisation. If there are any GAPS here, it should raise a red flag.