Self Assessment - Secnap Network Security

Detection & Visibility

How are threats on your endpoints currently detected?

We have a managed EDR solution with 24/7 monitoring and active response We have EDR software deployed but no one monitoring it around the clock We use traditional antivirus only We have no endpoint detection tools in place

1 / 10

Detection & Visibility

Can you detect lateral movement inside your network after a credential is compromised?

Yes. We have detection logic specifically for internal movement patterns. Possibly, but it depends on someone noticing unusual activity manually No. Once someone is inside, we wouldn't know until damage is done. We've never thought about it at this level

2 / 10

Identity & Access

How do you monitor for credential abuse and privilege escalation attempts?

We have Identity Threat Detection and Response (ITDR) actively in place We review Active Directory logs periodically We rely on password policies and MFA. No active monitoring. We have no specific controls around identity threat detection

3 / 10

Identity & Access

If an attacker gained valid credentials through phishing, how quickly would you know?

Within minutes. Anomalous login behavior triggers an alert and analyst review. Within hours, if someone checks the logs Probably not until something visibly breaks We wouldn't know until a breach was reported externally

4 / 10

Response Capability

When a real threat is confirmed, who responds and how fast?

A dedicated SOC team responds 24/7 and can isolate systems within minutes Our internal IT team handles it during business hours We call a third party, but response time varies We don't have a defined incident response process

5 / 10

Response Capability

Has your incident response plan been tested in the last 12 months?

Yes, we've run a tabletop exercise or real-world simulation recently We have a written plan but haven't tested it We have a rough outline, nothing formal No incident response plan exists

6 / 10

Logging & Intelligence

Are security logs from across your environment aggregated and searchable?

Yes. We have a SIEM with long-term indexed storage and active correlation rules. Logs are collected but not correlated or consistently reviewed Some systems log locally, but there's no centralized view Log management isn't something we've formalized

7 / 10

Compliance & Risk

Have you experienced a security incident, breach, or ransomware event in the last three years?

No incidents, and we've validated that through security testing No confirmed incidents, but we've had suspicious activity we couldn't fully explain Yes, a minor incident that was contained Yes, a significant event that impacted operations or data

8 / 10

Staffing & Operations

How many dedicated security staff do you have monitoring your environment?

We have a dedicated security team or a managed SOC partner covering us 24/7 IT staff handle security as part of broader responsibilities One person owns security alongside other duties No dedicated security resource. It's handled ad hoc.

9 / 10

Staffing & Operations

If your IT team was unavailable for 48 hours, would your environment still be monitored?

Yes. Our security monitoring doesn't depend on internal staff availability. Probably not, but we'd try to cover it No. Monitoring stops when the team is offline. This scenario has happened and it didn't go well

10 / 10

Almost there — where should we send your results?

We'll email you a full breakdown along with your score.

First Name *

Last Name

Company Name *

Work Email *