Pre-scoping questionnaire on IT 1. Business (Policies, strategy): 2. How many people : 3. Type of computers deployed and number? 4. Whether you store data on cloud? YesNo 5. If yes, what services are provided by cloud service provider. 6. Whether contract exists with the service provider? 7. What is process of commissioning/decommissioning of access? 8. Are cryptography techniques followed for encrypting sensitive data? 9. Is data classification done as per criticality? 10. Which is anti-virus used? 11. For remote working is VPN used to transfer data to and for? 12. Is DLP software installed? 13. Which is the firewall installed? Who defines the firewall rules? 14. Which are business applications installed, which is the Operating System?