https://eauditor.app/
Cyber Resilience Act Compliance Checklist
Section 1: Governance and Risk Management
1. Is there a designated officer responsible for cyber resilience compliance?
Yes
No
2. Has a risk assessment been conducted for all critical systems?
Yes
No
3. Are there documented policies for incident response?
Yes
No
4. Is there a training program for staff on cyber resilience?
Yes
No
5. Are third-party vendors assessed for cyber risks?
Yes
No
6. Is there a process for reporting cyber incidents?
Yes
No
7. Are cyber resilience policies reviewed annually?
Yes
No
8. Is there a budget allocated for cyber resilience initiatives?
Yes
No
9. Are roles and responsibilities for cyber resilience clearly defined?
Yes
No
10. Is there a communication plan for cyber incidents?
Yes
No
Section 2: Technical Controls and Monitoring
1. Are firewalls implemented on all critical systems?
Yes
No
2. Is antivirus software installed and regularly updated?
Yes
No
3. Are access controls in place for sensitive data?
Yes
No
4. Is multi-factor authentication used for critical systems?
Yes
No
5. Are regular backups performed for critical data?
Yes
No
6. Is there a monitoring system for detecting cyber threats?
Yes
No
7. Are software updates and patches applied promptly?
Yes
No
8. Is encryption used for sensitive data at rest and in transit?
Yes
No
9. Are intrusion detection systems in place?
Yes
No
10. Is there a policy for secure disposal of data and hardware?
Yes
No
Section 3: Cyber Resilience Act compliance checklist
1. Is there a formal process for evaluating the effectiveness of cyber resilience measures?
Yes
No
2. Are employees required to report suspicious activities related to cyber security?
Yes
No
3. Is there a plan for regular penetration testing of critical systems?
Yes
No
4. Are there documented procedures for responding to data breaches?
Yes
No
5. Is there a designated team for managing cyber resilience initiatives?
Yes
No