Cyber Security Form

Back to Globe Page

Corporate Questions

1. Organization Name

2. Organization Industry

3. Organization HQ Address

4. Total number of employees

Individual Questions

1. Name

2. Corporate email

3. Contact Number

4. Role

5. Position/Title

Self Assessment

DPA Compliance

3 attempts left

Start

DPA Compliance

1. Does your organization have an appointed Data Privacy Officer (DPO)?

Yes

2. Does your organization register Risk Assessments?

Yes

3. Does your organization have records of processing activities for risk assessment?

Yes

4. Does your organization conduct Risk Assessments?

Yes

5. Does your organization formulate your privacy management program?

Yes

6. Does your organization craft your privacy manual and complaints mechanism?

Yes

7. Does your organization inform data subjects of the personal information processing activities and obtain their consent when necessary?

Yes

8. Does your organization formulate policies/procedures that allow data subjects to object to subsequent processing or changes to the information supplied to them?

Yes

9. Does your organization have policies for limiting data processing according to its declared, specified and legitimate purpose?

Yes

10. Does your organization have policies/procedures for providing data subjects with access to their personal information including its sources, recipient, method of collection, the purpose of disclosure to third parties, automated processes, date of last access, and identity of the controller (Data Subject Access Request)?

Yes

11. Does your organization have policies/procedures that allow data subjects to dispute inaccuracy or error of their personal information including policies/procedures to keep the same up to date?

Yes

12. Does your organization have policies/procedures that allow the data subject to suspend withdrawal or order the blocking, removal, or destruction of their personal information?

Yes

13. Does your organization have policies/procedures for accepting and addressing complaints from data subjects?

Yes

14. Does your organization have policies/procedures that allow data subjects to get indemnified for any damages sustained due to such inaccurate, incomplete, outdated, false, and unlawfully obtained or unauthorized use of personal information?

Yes

15. Does your organization have policies/procedures that allow data subjects to obtain from the PIC a copy of his or her personal data processed by electronic means and in a structured and commonly used format?

Yes

16. Does your organization have policies/procedures for creation and collection, storage, transmission, use, and distribution, retaining personal data for a limited period or until the purpose of the processing has been achieved, and ensuring that data is securely destroyed or disposed of?

Yes

17. Does your organization implement appropriate and sufficient organizational and security measures (policies and procedures in place)?

Yes

18. Does your organization implement appropriate and sufficient physical security measures (Physical Access and Security, Design, and Infrastructure)?

Yes

19. Does your organization implement appropriate and sufficient technical security measures (Firewalls, Encryption, Access Control Policy, Security of Data Storage, and Other Information Security Tools)?

Yes

20. Does your organization have compliance with the DPA's Data Breach Management Requirements (e.g. Security Incident Policy, Data Breach Response Team, Incident Response Procedure, Breach Documentation, Breach Notification)?

Yes

21. Does your organization maintain Data Privacy Requirements (Legal Basis for Disclosure, Data Sharing Agreements, Cross Border Transfer Agreements, Security of Transfers) for third parties?

Yes

22. Does your company have periodic and mandatory personnel training on privacy and data protection in general and in areas reflecting job-specific content?

Yes

23. Does your organization provide issuance of Security Clearance for those handling personal data?

Yes

24. Does your organization have scheduling of Regular Risk Assessment for New and Existing programs, systems, processes, and projects?

Yes

25. Does your organization review Forms, Contracts, Policies, and Procedures on a regular basis?

Yes

26. Does your organization schedule regular Compliance Monitoring, Internal Assessments, and Security Audits?

Yes

27. Does your organization review, validate and update the Privacy Manual?

Yes

28. Does your organization have regular evaluation of the Privacy Management Program?

Yes

29. Is your organization establishing a culture of privacy by obtaining certifications or accreditations vis-à-vis existing international standards

Yes

30. Is your organization monitoring emerging technologies, new risks of data processing, and the Privacy Ecosystem?

Yes

31. Does your organization keep track of the data privacy best practices, sector-specific standards, and international data protection standards?

Yes

32. Is your organization seeking guidance and legal opinion on the new National Privacy Commission (NPC) Issuances of requirements?

Yes

Delete

Cancel

Submit

Security Assessment

3 attempts left

Start

Security Assessment

1. Does anyone in your organization have specific accountability for information technology (IT) security?

Yes

2. Does your organization have an information security policy that all employees have reviewed and agreed to adhere to?

Yes

3. Does your organization have a yearly plan or budget for improving information technology (IT) security?

Yes

4. Have you checked the security of specific information technology (IT) applications that process data within the organization?

Yes

5. Does your company have a capability to manage the security of your third-party and business partners that access your network?

Yes

6. Does your organization allow employees to work from home (WFH) or work anywhere?

Yes

7. Can you safely say that your office and network environment is secure?

Yes

8. Do you use services or infrastructure in the cloud?

Yes

9. Have the staff been trained in information technology security?

Yes

10. Is your company protecting information related to customer data, health information, or intellectual property?

Yes

11. Has the organization had a data breach in the last 12 months?

Yes

12. Have you completed a security risk assessment within the last 12 months?

Yes

13. Has your company network been penetration tested within the last 12 months?

Yes

14. Does your company collect and use threat intelligence information?

Yes

15. Does your company have a log management capability focused on supporting security?

Yes

Delete

Cancel

Submit

To start the assessment, you should complete Corporate and Individual questions first.

Security Assessment

Thank you for using the tool.

Your result: .

Confirm

Are you sure you want to exit this survey?

Oops!

Submit Failed

Sorry, your submission failed.

Submit Failed

No more attempts left. Please try again tomorrow.

Session Timeout

Your session has expired. Do you want to extend the session?

Scan your Domain

We will redirect you to the domain scanning page.

Yes

I agree to the collection and use of the data that I provided through this website by Globe for the purpose of Security Assessment and Domain Scanning. I understand that the collection and use of this data, which may include personal information and sensitive personal information, shall be in accordance with the Data Privacy Act of 2012 and Privacy Policy of Globe.