Cybersecurity Maturity Assessment

Email

This field is for validation purposes and should be left unchanged.

Which statement most accurately describes your current cybersecurity posture?

Partial: Cybersecurity risk management is implemented on an irregular, case-by-case basis

Risk-Informed: Cyber risk assessment of organizational and external assets occurs but is not typically repeatable or reoccurring

Repeatable: Consistent and accurate monitoring of cybersecurity risks. Executives communicate risks and ensure that cybersecurity is considered through all lines of operation in the organization

Adaptive: The organization actively adapts to a changing technological landscape and responds in a timely and effective manner to evolving, sophisticated threats

How does your organization make decisions about cybersecurity risks to production and operations?

We address cybersecurity issues only after problems occur, with little formal planning.

We are aware cybersecurity impacts the business, and some leaders consider it when making decisions, but it’s inconsistent.

We have defined policies and processes for managing cybersecurity risk that are regularly used across the business.

Cybersecurity risk is continuously monitored and actively informs business strategy, investments, and operational decisions.

How well does your organization understand what systems, data, and processes are critical to operations (including homegrown applications)?

We do not have a clear or complete picture of our systems and critical assets.

We know our most important systems and assets, but documentation is incomplete or outdated.

We maintain an up-to-date inventory of systems and understand risks to key operations.

We continuously track assets, dependencies, and risks in real time and use this insight to proactively reduce risk.

How does your organization protect systems and production from cyber incidents?

Protection measures are minimal or informal and vary by location or team.

We have basic protections (e.g., passwords, some training), but they are not consistently enforced.

We have standardized protections (access controls, training, backups) that are consistently applied.

We continuously improve protections based on emerging threats and integrate security into all operations and processes.

How effectively can your organization detect a cybersecurity issue that could impact production?

We would discover issues after disruptions become apparent.

We have some monitoring in place, but the speed of detection depends heavily on manual observation or luck.

We actively monitor systems and can reliably detect unusual activity or potential threats within moments.

We use advanced monitoring and analytics to quickly detect and anticipate threats before they impact operations.

How prepared is your organization to respond to a cybersecurity incident?

We respond in an ad hoc way, with no defined plan.

We have a general idea of what to do, but roles and actions are not clearly defined.

We have a documented response plan, and teams know their roles during an incident.

We regularly test and improve our response plan and coordinate seamlessly with internal teams and external partners.

How quickly and effectively can your organization recover from a cyber incident affecting production?

Recovery would be unpredictable, significant downtime is a real possibility.

We can recover key systems, but the process is not well-tested or consistent. Production might be impacted for 1-2 weeks.

We have tested recovery plans and can restore operations within defined timeframes. Production might be impacted for 3-5 days.

We can rapidly restore operations with minimal production disruption and continuously improve recovery based on lessons learned.

Your Results

Cybersecurity Maturity Assessment Score

This field is hidden when viewing the form

Score x 100

Enter Your Annual Revenue

Potential Revenue Impact

Based on your responses, a cyber attack could result in losses of approximately 15% of your revenue. Enter your annual revenue above to see how much impact this represents in dollars below.

Potential Revenue Impact

Based on your responses, a cyber attack could result in losses of approximately 10% of your revenue. Enter your annual revenue above to see how much impact this represents in dollars below.

Potential Revenue Impact

Based on your responses, a cyber attack could result in losses of approximately 5% of your revenue. Enter your annual revenue above to see how much impact this represents in dollars below.

Potential Revenue Impact

Based on your responses, a cyber attack could result in losses of approximately 1% of your revenue. Enter your annual revenue above to see how much impact this represents in dollars below.

Ready to take your cybersecurity maturity to the next level?

Amtech would love to help you plan your next actions to decrease your revenue loss exposure from a cybersecurity incident. Complete the fields below to inquire about a deeper assessment.

Company Name*

Company Email*

First Name*

Last Name*

Title*

Phone*

EnCore ERP, a solution for Sheet Plants, Box Plants, and Folding Carton Plants

EnCore Extensions

Label Traxx ERP, a solution for Labeling or Flexible Packaging Plants

Label Traxx Extensions

Axiom ERP, a solution for Sheet Feeder Plants

Axiom Extensions

MES Solutions for Packaging and Labeling Plants

Cybersecurity Maturity Assessment

Your Results

Ready to take your cybersecurity maturity to the next level?