- Do you apply daily patches to avoid zero days attacks?
- Will you copy customer data in non-production environments?
- Do you have in place measures to prevent viruses and malware from entering the facility or being loaded on to any systems?
- Do you have an antivirus software on each server?
- Do you have policies and controls in place to manage IT infrastructure?
- Do you monitor logs?