General Infrastructure
1. Please provide a list of servers and workstations. Please include operating
system (i.e. Microsoft Windows Server 2008 R2), basic hardware information,
approximate age, and server name.
2. Do you use any virtual machine technology (i.e. VMware, Hyper-V, XenServer)?
3. Please describe your mail server; including email server software, number of
mailboxes, storage capacity and utilization, hosted vs. in-house, and any other
relevant details.
4. What types of mobile equipment are supported, cell phones, tablets, laptops?
5. Which ISP are you using for your internet connection?
a. What is the connection speed?
b. What are your external IPs?
6. What is your internal IP address scheme?
7. Where are your websites hosted?
8. What domain names do you own?
9. What phone system are you using?
10. What are your telephone numbers?
11. Please describe and list any owned/leased copiers/scanners/printers (and
specify whether owned/leased). If leased, please include expiration date.
Disaster Recovery
1. Please describe your disaster recovery plan (including backup process).
2. How often is your disaster recovery plan tested? And when was the last time it
was tested?
3. Does the company utilize any offsite data storage or cloud services for backups?
Security
1. Please provide information about your perimeter security.
a. Information about the firewall.
b. Are there any existing VPN connections to offsite locations?
c. Is external access to internal resources available, such as accessing email on
the road? How is it provided?
2. What is your anti-virus solution?
3. What is your anti-spam solution?
4. What is your network authentication method? (i.e. Active Directory, LDAP, etc.)
Software
1. Please provide a list of off-the-shelf software used including number of copies,
versions and status of license compliance.
2. Does the company utilize any cloud services for applications?
3. Are there any internally developed applications being used? If so:
a. Please describe programming languages used, including versions.
b. How are these applications maintained/updated?
c. How often are these applications updated?
Staff
1. How many employees work in the IT department?
2. Who manages the adds/moves/changes of accounts on your network?
3. How many employees work onsite?
4. How many employees work offsite?
5. How are requests or help desk tickets submitted?