Darinel OrtegaStrategy & Technology
ES EN PT
Diagnósticos

¿Qué tan expuesta está tu empresa?

Veinte preguntas sobre cómo manejás accesos, respaldos, parches, incidentes y proveedores. Cinco minutos. El resultado se adapta al tamaño de tu organización: lo que se le exige a una empresa de cuarenta personas no es lo que se le exige a una de mil.

20questions
5dimensions
Optional, so results can be compared
Identity and access Who gets in, with what permissions, and what happens when they leave.

1Is there a second factor on anything that grants real access? Email, banking, systems administration.

2When somebody leaves the company, how long until their access is gone?

3Who holds administrator permissions?

4Do people share passwords with each other?

Data and backups What is protected, where the copy lives, and whether it was ever restored.

5Is there a backup of what cannot be lost?

6Where does that backup live?

7Do you know which information would be a serious problem if it leaked?

8Are staff laptops encrypted?

Defence and patching What you have exposed, how fast you patch, and who watches the alerts.

9How long does it take to apply a critical security update?

10Do you know exactly what you have exposed to the internet?

11What protection do the machines have beyond the antivirus they shipped with?

12Does anybody review the security alerts?

Incident response What happens on the day it happens: who decides, who gets called, what gets said.

13If you woke up tomorrow with your systems encrypted, is there a plan?

14Is it defined who decides to disconnect?

15Do you know how long the business can operate without its systems?

16Is it clear what gets said to customers and to the regulator, and when?

Third parties and compliance The suppliers who reach into your systems, and what your regulator demands.

17Which suppliers have access to your systems or your data?

18Is anything concrete required of them on security?

19When a supplier finishes their work, does their access get cut?

20Do you know what your sector and your country require of you by regulation?

No email, no name, no company name is asked for. The result gets its own address that you can share or keep.

Darinel Ortega Online · I reply during the day
Today
Hello. I'm not selling anything here: this is for exchanging knowledge about technology.
Write whatever you like — you can send text, images or documents. Messages reach my console and I reply from there.
You are writing outside working hours. I will read you as soon as the day starts.

An open conversation to share knowledge. Messages reach my console and I reply from there.

Let us book a conversation

Pick the day and time that work for you. Thirty minutes, no sales pitch.

Video call

For a video call, just ask for one here and I'll send you the session link.