Glossaire
Nos conseils
Actualités

Glossaire
Nos conseils
Actualités

À propos
Notre Histoire

Mot de Aline TSANGUE

Notre Mission

Notre Vision

Notre approche

Vos Avantages
Assurances non vie
Assurance Auto

Assurance maladie

Assurance voyage

Assurance tous risques chantiers

Assurance multirisque commerciale

Assurance habitation

Assurance transport

Assurance Individuelle accident

Assurance responsabilité civile

Assurance globale de banque

Assurance tous risques informatiques

Cybernétique

Assurance bris de machine

Asssurance des risques pétroliers
Assurances vie
Études

Retraite / Projets

Frais funérailles

Assurances invalidité décès

Decès groupe emprunteurs

Decès groupe entreprises

Épargne

Prévoyance

Indemnités de fin de carrière

Retraite complémentaire
Actualités
Médiathèque
contact

Menu

À propos
Notre Histoire

Mot de Aline TSANGUE

Notre Mission

Notre Vision

Notre approche

Vos Avantages
Assurances non vie
Assurance Auto

Assurance maladie

Assurance voyage

Assurance tous risques chantiers

Assurance multirisque commerciale

Assurance habitation

Assurance transport

Assurance Individuelle accident

Assurance responsabilité civile

Assurance globale de banque

Assurance tous risques informatiques

Cybernétique

Assurance bris de machine

Asssurance des risques pétroliers
Assurances vie
Études

Retraite / Projets

Frais funérailles

Assurances invalidité décès

Decès groupe emprunteurs

Decès groupe entreprises

Épargne

Prévoyance

Indemnités de fin de carrière

Retraite complémentaire
Actualités
Médiathèque
contact

devis assurance cybernétique

Accueil » devis assurance cybernétique

Your legal name ( cover will apply to all your subsidiaries unless you tell us otherwise))

For how many years have you carried on business ?

Street

Address

State

Postcode

Country

Website

Email Address

Please provide your revenue

What % of your revenue is from ecommerce ?

How many staff do you have ?

Please describe the nature of your business :

Have there been any mergers or acquisitions in the last 3 years or are there any planned in the next 12 months

What % of your revenue is to the following market sectors:

Government

Manufacturing/Industrial

Construction/Engineering

Retail

Healthcare/Medical

Finance

Other

If the above business activity and sector split has been substantially different in the past 12 months, please explain:

If any substantial changes are expected in the next 12 months, please explain:

Please provide details of personal information (in both electronic and non-electronic form) you process or store using the following table. This should include information relating to employees and third-parties:

Please provide further details below if necessary:

Please indicate your level of compliance with the latest Payment Card Industry (PCI) data security standards:

If you have answered less than 100% compliance for the level of transactions you process, please advise what steps you are taking to ensure future compliance and the expected timeline for major milestones to achieve this:

Do you operate any POS systems?YesNo

please explain how you prevent intrusions and protect card data, including wehther you emply full end to end encryption, tokenisation and white labelling etc. If you do not use these measures, how do you ensure the security fo the card data?

Do you obtain permission before collecting sensitive personal information?YesNo

Do you have a material or critical reliance on any computer system or platform (including any industrial control system) for any aspect of your continuing business operations?YesNo

please state in what way you are reliant and what steps you take to mitigate that risk including

reduntant servers,hot and warm start backups, co-location, mirror sites etc.how frequently you back up,how often you test your BCP and DRP and backup processe to ensure they remain effectives,any steps you have taken to quantify the likely loss of net profit from the failure of a critical system (for example carrying out a business impact assessment),how interdependent different systems are (ie could a failure of one critical system bring down many systems or are they sufficiently segregated to minimise that risk?),have you calculated any RTO or do you have plans to do so?

Do you have a designated Chief Privacy Officer?YesNo

Do you have a designated Chief Information Security Officer?YesNo

Do you have a formal risk assessment process that identifies critical assets, threats and vulnerabilities?YesNo

Do you have a formal documented policy with respect to:

Data classificationYesNo

Information SecurityYesNo

PrivacyYesNo

Acceptable UseYesNo

Access ManagementYesNo

Disaster recovery and business continuity with defined RTO?YesNo

Do you perform annual disaster recovery tests of critical systems?YesNo

Do you have a formal security due diligence and sign-off process prior to appointing system vendors and third party service providers?YesNo

Do your contracts with such vendors include rights of audit, minimum network security standards and rights of audit?YesNo

Do you perform formal reviews of third party service providers to ensure that they adhere to your data security requirements?YesNo

Do you have installed and configured:

firewalls to prevent unauthorised access and antivirus software on all end-points, mission critical servers, portable media and connection points etc ?YesNo

an intrusion detection and prevention system?YesNo

WhitelistingYesNo

a solution to protect the security of mobile devices that store Company data?YesNo

Security Event Management Software?YesNo

Data leak prevention softwareYesNo

Comment:

Have vulnerability audits and/or has third party penetration testing been carried out in the last 12 months?

Vulnerability auditsYesNo

Penetration testingYesNo

Please provide brief details including whether any ‘red-flag’ or critical issues or vulnerabilities were identified:

Is sensitive data ever stored on internet facing servers?YesNo

Do you automatically update or patch commercial desktop software and open source software for known vulnerabilities?YesNo

Do you use any software that is considered retired or “end-of-life” by the manufacturer and is no longer supported (for example Windows XP)?YesNo

Do you have a formal procedure to add, delete or modify user access to your computer system?YesNo

Do you enforce complex passwords (at least 8 characters and that must contain both alphabetic and numeric characters), which must be regularly changed?YesNo

Do you use a multi-factor authentication system for remote access to its computer system?YesNo

Do you perform a criminal history check and obtain references for all new recruits and (if relevant) contractors?YesNo

Do you regularly conduct information security awareness training for employees including Phising?YesNo

) Do you have entry controls that limit and monitor physical access to premises where your systems or data are held?YesNo

Do you maintain daily off-site back-ups of critical system data?YesNo

Do you regularly test your ability to recover back-up data?YesNo

Profitez de la vie, nous couvrons vos incertitudes

Assurances non vie

Assurance Auto
Assurance maladie
Assurance voyage
Assurance habitation
Assurance responsabilité civile
Toutes nos assurances non vie

Assurances vie

Assurance etudes
Assistance frais funérailles
Assurance indemnités de fin de carrière
retraite / projets
Toutes nos assurances vie

Nos devis

Devis assurance MRH
Devis assurance maladie
Devis assurance voyage
devis assurance bris de machines
Tous nos dévis

A Propos

Notre histoire
Mot de aline tsangue
Notre mission
Notre vision
Notre approche
Vos avantages
Glossaire

Arrêté N°00000527/A/MINFI/SG/DGTCFM/DA/SDACC/SA/EAC DU 09 AVRIL 2024

À propos
Assurances non vie
Assurances vie
Actualités
contact