Can you provide some examples of key information assets in your company?
Description of your business activities
How many departments does your company have and what are their names?
Please describe the types of data or information that your company handles
Who in your organization is responsible for information security?
How do employees currently access your company's information systems and data?
Can you briefly describe the physical security measures at your company's primary location?
Do you have any specific process for managing changes to your information systems?
How does your company ensure the security of information during transmission?
Do you have a process in place for managing and reporting security incidents?
Does your company have a plan to maintain or restore business processes in the event of an outage or major incident?
Are there any specific legal, regulatory or contractual requirements related to information security your company needs to comply with?