Do you provide email encryption?
Yes

Do you provide a spam filter?
Yes

Are links inside email messages scanned before opening?
Yes

Is your antivirus solution real-time protection?
Yes

Is your antivirus solution monitored?
Yes

Are you able to detect devices that do not have protection installed?
Yes

Do you provide penetration testing?
No

Do you provide network security monitoring?
Yes

Will your network security alert 24/7?
Yes

Is your network security attended by a person?
Yes

Do you offer multi-factor authentication?
No

Do you provide automatic patch management?
No

Is your endpoint protection based on behaviors or a threat database:
Based on a database of threats, Behaviors based

Do you provide Managed Endpoint Protection that is compliant with applicable regulatory requirements?
Yes

Do you provide a Threat and/or Risk Analysis that is compliant with regulatory requirements?
Yes

Do you provide services for writing a Written Information Security Plan (WISP)?
No

Do you provide a Written Security Policy for Third-Party Service Providers?
No

Do you provide procedures for disposal of non-public information?
No

Do you provide assessments on an ongoing scheduled basis?
Yes

Do you provide forensic analysis in the event of a security breach?
Yes

Do you provide an Incident Response Plan that is in line with regulatory requirements?
Yes

Do you provide a disaster recovery plan?
No

Do you provide a backup and restore solution?
No

Is backup onsite?
Yes

Is backup offsite cloud based?
Yes

Frequency of backup?
Email archiving only, 10 years.

Are snapshot backups available?
No

Do you provide best practice training for email activity?
Yes

Do you provide staff training in avoiding cybersecurity threats?
Yes

Do you provide frequent short training videos?
Yes

Are the videos monitored to ensure they are watched?
Yes

Do you provide mock phishing emails that are tracked?
Yes