Digital Duck

Risk Audit

Operational Risk Audit

Evaluate your current security posture across 5 critical vectors. Check the protocols you currently have implemented to identify vulnerabilities in your perimeter.

1. Identity & Access Management

Hardware-based Multi-Factor Authentication (MFA) or Authenticator Apps are enforced on all administrative and email accounts.

A zero-knowledge Password Manager is utilized to generate and store unique, high-entropy passwords for every service.

2. Endpoint & Network Security

All endpoints (laptops, mobile devices) utilize full-disk encryption (e.g., BitLocker, FileVault).

Automated patch management is enabled for the OS and critical third-party applications (browsers, office suites).

3. Data Resiliency & Incident Response

Mission-critical data is backed up following the 3-2-1 rule, including an immutable, offline air-gapped copy.

A formal Incident Response Plan is documented and accessible offline in the event of a catastrophic ransomware deployment.

4. Cloud & Vendor Security

Third-party vendors with network access undergo strict security audits (e.g., SOC 2 compliance verification).

Cloud environments utilize Single Sign-On (SSO) integrated with strict conditional access policies (blocking foreign IPs).

5. Physical & Environmental Security

A strict Clean Desk Policy is enforced, and workstations are configured to auto-lock after 5 minutes of inactivity.

Physical privacy screen filters are mandated for personnel operating in public or high-traffic transit environments.

Threat Posture Score

Awaiting Assessment

Complete the checklist above and generate a score to view your current risk posture.

🦆