Skip to main content
Back to Home

IT Compliance Scorecard

Assess your organization's IT resiliency, FIPA compliance, and disaster recovery readiness. Get personalized recommendations based on your score.

Progress

0%

0 of 25 questions answered

How to Rate Each Control

Not Implemented

No controls in place; critical gap

Partially Implemented

Limited coverage; significant gaps remain

Mostly Implemented

Adequate coverage; minor gaps

Fully Implemented

Strong coverage; meets requirements

Optimized

Fully implemented + continuously improved

Backup & Recovery Infrastructure

Offsite backups to geographically separate cloud region

RTO ≤ 4 hours for critical systems

RPO ≤ 1 hour for transactional data

Monthly restore tests documented

Backups encrypted (AES-256)

Disaster Recovery Plan

Written DRP reviewed by leadership

Emergency contact tree maintained

Failover procedures documented

Communication plan pre-approved

Annual DRP simulation conducted

Cloud & Sovereign Infrastructure

Multi-region deployment (≥2 regions)

Sovereign cloud compliance (FIPA/state residency)

Automatic failover on outage

Real-time database replication (<1 sec lag)

Geographic load balancing

Email Security & Compliance

Email encryption (TLS, S/MIME)

DLP policies enforced

Advanced threat protection (ATP)

Phishing & malware detection

Email audit logs retained (≥1 year)

Identity & Access Management

MFA enforced for all users

Conditional access policies

Privileged access management (PAM)

Regular access reviews (quarterly)

Password policy enforced (14+ chars, complexity)

Get Your Personalized Report