QUESTIONNAIRE FOR IT INFRASTRUCTURE ASSESSMENT
Security
1. Have you implemented Standard Operating Procedure and policies?
Yes No
2. Have you implemented Active Directory management
Yes No
3. Have you implemented Remote Logins / User management
Yes No
4. Have you set User Privileges
Yes No
5. Does the servers located in the same domain and/or switch?
Yes No
6. Are you running SAS, SATA, Fiber, or SCSI on your database server/s?
Yes No
7. What is the RAID configuration on your database servers?
..................................................................................................
8. How many CPUs on the database servers?
...................................................................................................
9. How much RAM is on your database server/s?
.....................................................................................................
10. How old are your database server/s?
................................................................................................................
11. Have your drawn LAN Cabling structure
Yes No
12. Have you implemented VLAN?
Yes No
13. Do we have Port management system?
Yes No
14. Have we implemented VPN
Yes No
15. Which protocol is used for VPN connection
................................................................................................................
16. Have we implemented Firewall policy?
Yes No
17. What is the status of your network?
................................................................................................................
18. What are your network connection speeds?
................................................................................................................
19. Do you have fiber or Ethernet
Yes No Specify: 10/100/1000?
20. Is fibre/Ethernet mapped to digital file ?
Yes No
21. Specify the implemented Firewall devices?
Yes No
22. Does your Firewall have VPN capability?
Yes No
23. Does your Firewall have DMZ capability?
Yes No
24. Does your Firewall have site-to-site capability?
Yes No
25. Is your Firewall Stateful?
Yes No
26. Is it possible to do IPSEC or PPTP?
Yes No
27. What is your incoming bandwidth?
................................................................................................................
28. What is your outgoing bandwidth?
................................................................................................................
29. Has your bandwidth spiked to 80% or more in the past 3 months?
Yes No
30. Are your switches gigabit or higher?
Gigabyte Higher
31. Do you have an active directory and domain?
Yes No
32. How many domains are used in your network?
................................................................................................................
33. Will the servers use different domains than the users?
Yes No
34. Do you have ADFS or an Identity Store like BigIP?
Yes No
35. Do you have a server room?
Yes No
36. Is your server on railed racks?
Yes No
37. Do you have VOIP phones configured for both data and voice connections to
laptops/workstations?
Yes No
38. Have you set up DC & DR?
Yes No
39. Mention the software being used for DB server.
................................................................................................................
40. Do you have ,HA for firewall (Redundancy)?
Yes No
41. Have you implemented intrusion detection system?
Yes No
42. Have you implemented intrusion prevention system?
Yes No
Data Management
1. Have you configured Automatic Software / user Backup
Yes No
2. Backup copy to another remote location
Yes No
3. What measures have we taken for preventing data loss
................................................................................................................
Performance
1. Have we enabled Audit Logging for Restricted Data or not
Yes No
2. Have we enabled Administrator and Operator Logs or not
Yes No
3. Have we enabled Network protection?
Yes No
4. Do we have Wireless Networks protection?
Yes No
5. Protection of System
6. Do we conduct PC Annual Health Check?
Yes No
Backup
1. Do we transport and store Backup tapes to another location
Yes No
2. Do we conduct Periodical verification of backups?
Yes No
3. Do we have Disaster recovery system?
Yes No
4. Do you have Tape, HDD, or offsite backup equipment?
Yes No
5. If tapes, what type of tapes.
................................................................................................................
6. If HDD, specify its storage and HDD capacity?
................................................................................................................
7. What type of devices do you have?
................................................................................................................
8. Specify the backup routine that you follow?
................................................................................................................
9. What is the longevity of the backup?
................................................................................................................
10. Is there a reuse policy?
Yes No
11. When are the full backups taken?
................................................................................................................
12. When are the incremental backups taken?
................................................................................................................
13. Is there a secondary failsafe system offsite?
Yes No
14. Specify what all do you back up
OS or the entire client PC
Laptop or mobile device
Snapshot backup
15. When does the backup occur?
................................................................................................................
16. Specify where the backups get stored?
................................................................................................................
17. Which Email server is used for mail ilg solution
................................................................................................................
18. Specify If any backup server is used?
................................................................................................................
19. Have you implemented any archiving solutions for backup?
Yes No
20. Have you implemented a email policy?
Yes No
Administration
1. Do we have an internal Steering committee for IT department review
Yes No
2. How do you maintain Password management (Whether sensitive user IDs (e.g. root,
RDBMS, DBA etc) and passwords are maintained as per HO guidelines and the
prescribed procedures are being complied)
................................................................................................................
3. Whether passwords are kept in a dual custody in sealed cover
Yes No
4. Do we update changed passwords and again document it and save in a sealed cover?
Yes No
5. Do we have any Business continuity plan?
Yes No
6. Do we have Server and Firewall warranty
Yes No
7. Have you implemented any Asset Management System?
Yes No
8. Have you implemented any IT ticketing system?
Yes No
9. Have you implemented any Network monitoring tool?
Yes No
