Which technology solutions are you currently using to protect your data? These can include email services, applications, file storage systems, and security tools such as encryption.
How are you currently securing your data?
Which types of data do you possess, and of this, which is the most important?
How and where is your data currently stored? (Cloud? On premise? Combination?)
Have you had any data incidents or breaches?
How is critical data handled? Is it frequently sent outside of the organization?
How do you currently track the location and usage of your firm’s data?
What are the industry regulations your firm must comply with?
How are employees trained on data security?