PUBLIC TRANSPORT DEPOT CYBERSECURITY & NETWORK VULNERABILITY AUDIT 2026 Created by ChecklistGuro (https://checklistguro.com) --- NETWORK INFRASTRUCTURE & HARDWARE SECURITY --- [ ] Audit Inspection Date [ ] Network Node/Server Room Location [ ] Hardware Assets Inspected (Core Switches, Edge Routers, Firewall Appliances, Wireless Access Points, Network Storage (NAS/SAN)) [ ] Firewall Configuration Status (Fully Compliant, Minor Discrepancies, Critical Vulnerabilities Found, Not Applicable) [ ] Identified Network Vulnerabilities [ ] Network Topology Diagram/Evidence [ ] Lead Network Auditor Signature --- ACCESS CONTROL & IDENTITY MANAGEMENT --- [ ] Multi-Factor Authentication (MFA) Implementation Status (Fully Implemented, Partially Imrolled, Not Implemented, N/A) [ ] Authorized Access Methods Verified (Biometric Scanners, Smart Cards / RFID, Digital Certificates, Password-based Authentication, Hardware Tokens) [ ] Privileged Account Audit Date [ ] Identified Access Discrepancies or Unauthorized Account Findings [ ] User Access Review Log (Evidence) [ ] Auditor Verification Signature --- ENDPOINT SECURITY & DEVICE MANAGEMENT --- [ ] Device Type Identification (Mobile Handheld/Tablet, Desktop/Laptop Workstation, IoT/Embedded Sensor, On-Bus/On-Train Terminal) [ ] Antivirus/EDR Software Status (Active & Up-to-date, Active but Outdated, Inactive/Not Installed, Not Applicable) [ ] Last Security Patch Installation Date [ ] Security Controls Verified (Disk Encryption Enabled, USB Ports Disabled/Restricted, Automatic Screen Lock Active, Unauthorized Software Scan Completed) [ ] Vulnerability Findings & Observations [ ] Endpoint Scan Report Upload [ ] Auditor Verification Signature --- FLEET TELEMATICS & IOT VULNERABILITY ASSESSMENT --- [ ] Telematics Hardware Security Status (Secure/Encrypted, At Risk/Unencrypted, Non-functional, Unknown) [ ] Identified Vulnerabilities Found (Unsecured Firmware, Insecure Communication Protocol (e.g., Unencrypted MQTT), Default Credentials Still Active, Unauthorized Device Connection, No Software/Patch Updates Available) [ ] Number of IoT Devices Audited [ ] Detailed Vulnerability Findings [ ] Last Firmware Update Date [ ] Upload Network Traffic Logs or Scan Reports --- DATA ENCRYPTION & INTEGRITY VERIFICATION --- [ ] Encryption Standard for Data at Rest (AES-256, AES-128, RSA-2048, Not Encrypted, Other) [ ] Encryption Protocols in Use for Data in Transit (TLS 1.3, TLS 1.2, SSL, IPsec, HTTPS) [ ] Last Data Integrity Audit Date [ ] Encryption Key Management Procedure Summary [ ] Encryption Certificate Verification Report [ ] Auditor Verification Signature --- NETWORK MONITORING & INTRUSION DETECTION --- [ ] Intrusion Detection System (IDS) Status (Active and Monitoring, Active but Alerts Silenced, Inactive/Down, Not Implemented) [ ] Monitored Network Segments (Fleet Telematics Network, Administrative/Office Network, CCTV & Surveillance Network, IoT & Sensor Network, Public Wi-Fi/Guest Network) [ ] Recent Critical Security Alerts Summary [ ] Last System Log Review Date [ ] Number of Unresolved High-Priority Alerts [ ] Upload Network Traffic Audit Report --- INCIDENT RESPONSE & DISASTER RECOVERY READINESS --- [ ] Last Incident Response Plan Review Date [ ] Incident Response Plan Status (Active and Up-to-Date, Requires Immediate Update, Under Review, Outdated/Expired) [ ] Verified Backup Types (Off-site Cloud Backup, On-premise Immutable Backup, Physical Tape/Removable Media, Real-time Data Mirroring) [ ] Summary of Last Disaster Recovery Drill Results [ ] Upload Latest Disaster Recovery Test Report [ ] Auditor Verification Signature --- PHYSICAL SECURITY OF IT ASSETS --- [ ] Server Room Access Status (Fully Secured, Unsecured / Door Ajar, Security Lock Malfunction) [ ] Physical Security Measures Present (CCTV Surveillance, Biometric Access Control, Security Guard Patrols, Electronic Keycard System, Motion Sensors) [ ] Observed Vulnerabilities or Unsecured Entry Points [ ] Photographic Evidence of Asset Security [ ] Auditor Verification Signature --- EMPLOYEE CYBERSECURITY AWARENESS & TRAINING --- [ ] Date of Last Security Awareness Training Session [ ] Compliance Rate of Department Staff (Below 75%, 75% - 90%, 91% - 100%) [ ] Training Topics Covered in 2026 (Phishing & Social Engineering, Password Management & MFA, Secure Remote Access, Data Privacy & GDPR Compliance, Physical Device Security) [ ] Training Attendance Logs & Certification Records [ ] Summary of Identified Training Gaps or Personnel Risks [ ] Auditor Verification Signature --- THIRD-PARTY VENDOR & SUPPLY CHAIN RISK MANAGEMENT --- [ ] Vendor Access Levels (Full Network Access, Remote Software Access Only, Physical Depot Access Only, No Direct Network Access) [ ] Last Security Compliance Audit Date [ ] Vendor SOC2 or Security Certification Document [ ] Vendor Risk Level (Critical (High Risk), Medium (Moderate Risk), Low (Minimal Risk)) [ ] Summary of Identified Vendor Vulnerabilities [ ] Auditor Verification Signature --- END OF TEMPLATE --- Transform this text into a digital, automated, and trackable mobile app! Visit: https://checklistguro.com/templates/public-transport-management/public-transport-depot-cybersecurity-network-vulnerability-audit-2026 (Click "Install Template" to launch your digital inspection tool immediately)