RIA security quiz: how
secure are you

Take this 10-question quiz to find out if you are safe and secure, or if your RIA is at risk to become a cyber-crime victim.

1. Do you have a Single Sign-On identity framework?

• Yes, an Active Directory or Cloud ID
• Yes, some other system is in place. What is SSO?
• No, we do not use a centralized identity system or have single-sign on deployed

PRO TIP: If possible use Multi Factor Authentication to support your SSO framework

2. Which of the following is true about your Disaster Recovery program?

• All critical systems and data are automatically backed up and are tamper proof
• Our IT guy regularly conducts business continuity exercise drills
• We use a cloud-based recovery service

3. Do you monitor for unauthorized intrusion activity?

• Yes, we do have an intrusion detection system (IDS)
• Yes, our IT guy monitors for cyber-attacks daily, somehow
• No, we cannot monitor for such activities

4. Do you have a security policy in place?

• Yes, we have a comprehensive security policy endorsed by management
• Yes, someone wrote a policy for us to follow
• No, we do not have a complete security policy

PRO TIP: You need to define a security policy to ensure compliance and alignment to best practices. We can help you write one and get compliant.

5. How do you connect your RIA to cloud services?

• We use VPN and/or SSL to securely access hybrid cloud services
• We connect to the cloud via the Internet!?!
• We do not use cloud services at this time

PRO TIP: We use Microsoft Cloud technology for a platform specifically built for RIAs. We’d be happy to show you how the system works. Request a demo.

6. How do you monitor for data leaks?

• We do have a comprehensive data protection program in place with rule detection logic
• Word of mouth, someone reported it
• We cannot track or monitor for data leaks

PRO TIP: You should have a comprehensive data and information protection solution. Our Cloud and Managed IT Platform for RIAs provides technology for both.

7. How long does it take to deploy critical security updates to software?

• It takes us 5-30 days and we strive to patch quickly
• We need more than 30+ days because it is a lot of work
• We have to patch? Don’t systems patch themselves?

PRO TIP: Updating systems on time and taking the practice seriously is paramount to the security of your environment. It sounds simple, but in enterprise and business environments there are a lot of factors at play that could delay even critical updates. Explore cloud options that run your application in an always up to date environment.

8. How do you limit access to your resources?

• We control access based on roles and responsibilities in groups
• Everyone asks everyone for access to everything
• We don’t have any real means to reliably restrict access to services and data

PRO TIP: Define roles and responsibilities and look for technology that helps you deploy access controls to effectively manage authentication and authorization to resources.

9. Do you perform vulnerability assessments on your environment?

• We have a vulnerability management program and assessment technology in place
• We let our IT admin run some scats at times or wait for others to expose our gaps
• We do not have a vulnerability scanner or process

PRO TIP: Identify a vulnerability management service that has cloud and internal offerings for your network.

9. Do you perform vulnerability assessments on your environment?

• We have a vulnerability management program and assessment technology in place
• We let our IT admin run some scats at times or wait for others to expose our gaps
• We do not have a vulnerability scanner or process

PRO TIP: Identify a vulnerability management service that has cloud and internal offerings for your network.

10. Are you prepared to deal with ransomware attacks and demands?

• We patch our systems regularly, remediate any potential risks quickly, and have regular backups
• We have purchased enough Bitcoins to pay for ransoms, so we’re not worried if it happens
• We are not prepared to handle malware and ransomware attacks at this point

PRO TIP: Consult with an antivirus vendor to obtain a comprehensive solution for all systems. Patch your systems and apps regularly to limit your risk. Be aware of zero-day potential risks by following vendor bug reports and awareness campaigns.

Protect your RIA from unnecessary security risks

If your answers to this simple security quiz have raised concerns about cybersecurity, ask us about how our Cloud
and Managed IT Platform for RIAs delivers world-class security and simplified day-to-day operations.

Give your RIA the technology it needs to thrive. Request a demo now.