NETWORK SECURITY AUDIT Created by ChecklistGuro (https://checklistguro.com) --- EXECUTIVE SUMMARY & SCOPE --- [ ] Audit Objective Statement [ ] Scope Description (Networks, Systems, Data) [ ] Number of Locations Included in Audit [ ] Audit Start Date [ ] Audit End Date (Estimated) [ ] Logistics Business Areas Included (Warehousing, Transportation (Trucking), Freight Forwarding, Supply Chain Management, Customs Clearance) [ ] Systems within Scope (Select all that apply) (TMS (Transportation Management System), WMS (Warehouse Management System), GPS Tracking Systems, ERP System, Custom APIs) [ ] Primary Contact for Audit [ ] Brief Overview of Observed Risks (Initial Assessment) --- NETWORK INFRASTRUCTURE ASSESSMENT --- [ ] Number of Firewalls in Use [ ] Firewall Vendor (Cisco, Palo Alto Networks, Fortinet, Check Point, Other) [ ] Summary of Firewall Rule Set Review [ ] Current Router Firmware Version (Specify for key routers) [ ] Number of VLANs in Use [ ] VLAN Security Segmentation Implemented (Select all that apply) (PCI DSS Compliance, Guest Network Isolation, Departmental Isolation, Logistics Data Isolation, None) [ ] Last Router Firmware Update Date (Specify for key routers) --- WIRELESS NETWORK SECURITY --- [ ] Number of Wireless Access Points (WAPs) [ ] Wireless Encryption Protocol in Use (WEP, WPA, WPA2, WPA3, TKIP, AES) [ ] Wireless Network Security Protocols Enabled (MAC Address Filtering, RADIUS Authentication, 802.1X Authentication, Captive Portal, Guest Network Isolation) [ ] Wireless Network Authentication Method (Open, Shared Key, RADIUS) [ ] Description of Wireless Network Segmentation (e.g., guest, employee, vehicle) [ ] Wireless Network Configuration Files (e.g., WAPs, Controller) [ ] Last Wireless Network Security Assessment Date [ ] SSID(s) in Use --- ENDPOINT SECURITY --- [ ] Number of Company-Issued Laptops [ ] Number of Mobile Devices (Company Managed) [ ] Endpoint Protection Software in Use (Microsoft Defender for Endpoint, CrowdStrike Falcon, Symantec Endpoint Protection, Other (Specify in LONG_TEXT)) [ ] Specify 'Other' Endpoint Protection Software (if selected above) [ ] Security Features Enabled on Endpoints (Select All That Apply) (Antivirus, Firewall, Data Loss Prevention (DLP), Disk Encryption, Host-Based Intrusion Prevention System (HIPS), Application Whitelisting) [ ] Endpoint Patch Management Process (Automated and Centralized, Manual and Decentralized, Combination of both) [ ] Last Patch Management Cycle Completion Date [ ] Describe the process for onboarding new endpoints to the network --- DATA SECURITY & PRIVACY --- [ ] Data Encryption at Rest Compliance (Fully Compliant, Partially Compliant, Not Compliant) [ ] Data Encryption in Transit Compliance (Fully Compliant, Partially Compliant, Not Compliant) [ ] Describe the data classification scheme in use (e.g., Public, Confidential, Restricted). [ ] Approximate number of customer records processed annually. [ ] Which data privacy regulations apply to the organization? (Select all that apply) (GDPR, CCPA, HIPAA, Other (Specify in LONG_TEXT)) [ ] Describe data retention policies and procedures. How long is data stored? [ ] Upload a copy of the data privacy policy (if available). [ ] Date of last data privacy impact assessment (DPIA). --- ACCESS CONTROL & IDENTITY MANAGEMENT --- [ ] Multi-Factor Authentication (MFA) Implementation (Fully Implemented for All Users, Partially Implemented (Specific Roles), Not Implemented) [ ] Password Complexity Policy Enforcement (Strict Policy Enforced (Length, Complexity, Rotation), Moderate Policy Enforced, Weak or No Policy) [ ] Account Lockout Threshold (Failed Login Attempts) [ ] Privilege Access Management (PAM) Practices (Least Privilege Principle Applied, Regular Privilege Access Reviews Performed, Just-in-Time (JIT) Privilege Elevation, Centralized PAM Solution in Place) [ ] Last User Access Review Date [ ] Description of User Onboarding/Offboarding Procedures [ ] Centralized Identity Provider (IdP) Usage (Using Centralized IdP (e.g., Azure AD, Okta), Using Local User Accounts, Hybrid Approach) --- INCIDENT RESPONSE & BUSINESS CONTINUITY --- [ ] Estimated Recovery Time Objective (RTO) in Hours [ ] Estimated Recovery Point Objective (RPO) in Hours [ ] Describe the current Incident Response Plan (IRP) [ ] Which departments are involved in the incident response process? (IT, Legal, Operations, Public Relations, Executive Management) [ ] Last Incident Response Plan Review Date [ ] Summarize recent simulated incident response exercises (drills) and findings. [ ] Communication methods used during an incident (choose one) (Email, Phone Calls, SMS, Dedicated Incident Communication Platform) [ ] Upload a copy of the Business Continuity Plan (BCP) --- VENDOR RISK MANAGEMENT --- [ ] Vendor Security Questionnaires Completed? (Yes, No, In Progress) [ ] Number of Vendors Audited Annually [ ] Summary of Vendor Risk Assessment Methodology [ ] Security Controls Verified in Vendor Agreements (Select all that apply) (Data Encryption at Rest, Data Encryption in Transit, Multi-Factor Authentication, Regular Security Audits, Incident Response Plan, Business Continuity Plan, Data Breach Notification Procedures) [ ] Date of Last Vendor Security Audit [ ] Vendor Security Audit Reports Reviewed? (Yes, No, N/A) [ ] Description of Vendor's Data Retention Policies --- PHYSICAL SECURITY & NETWORK ACCESS POINTS --- [ ] Are network rooms/server rooms physically secured? (Yes, with access control system, Yes, with locks and monitoring, No, lacking physical security, Unsure) [ ] What type of access control is implemented? (Biometrics (fingerprint, retinal scan), Keycard/Proximity Card, Combination Lock, None, Manual Logbook) [ ] Number of network access points (routers, switches, firewalls) exposed without physical barriers? [ ] Describe visitor access procedures to network areas. [ ] Are cabling closets locked? (Yes, No, Partially (some closets locked), Not applicable) [ ] Upload a diagram of network room layout. [ ] Is there video surveillance of network areas? (Yes, and recordings are retained, Yes, but recordings are not retained, No, Unsure) [ ] Location of primary network infrastructure (e.g., server room, main router) --- LOG MANAGEMENT & MONITORING --- [ ] Number of Security Logs Generated Daily [ ] Centralized Logging System in Use? (Yes, No, Partial) [ ] Description of Log Retention Policy (duration, storage location, disposal method) [ ] Which Log Sources are Currently Monitored? (Firewalls, Routers, Servers, Endpoint Devices, Intrusion Detection/Prevention Systems, Applications, Cloud Services) [ ] Are Logs Encrypted at Rest? (Yes, No, Partial) [ ] Time Required to Review Logs for Anomalies [ ] Describe the process for responding to log-generated alerts. [ ] Are Log Alerts Integrated with an Incident Response System? (Yes, No) --- END OF TEMPLATE --- Transform this text into a digital, automated, and trackable mobile app! Visit: https://checklistguro.com/templates/logistics/network-security-audit (Click "Install Template" to launch your digital inspection tool immediately)