A2
CE Danzell
Scope of Assessment
Significantly restructured from Willow. Device questions renumbered. Networks and equipment moved earlier. New questions on site connectivity, sub-set creation method, and home worker connection type. Development/pen-testing networks explicitly excluded. Social media now classified as cloud services.
18 questions
7 new in Danzell
A2.1
A2.2
A2.2.1
A2.2.2
A2.3
A2.3.1
A2.3.2
A2.4
A2.4.1
A2.4.2
A2.5
A2.5.1
A2.6
A2.6.1
A2.7
A2.8
A2.9
A2.10
Is this assessment for your whole organisation or only a part of it?
choice
If you are certifying part of your organisation please write a detailed description of the scope here.
text
Please provide a description of any networks that have been excluded from the assessment by creating a sub-set.
text
New
Where one or more sub-sets have been created, please describe how this has been achieved.
text
New
Are the networks included in the scope of this assessment being used at the company locations you provided earlier?
yesnodescribe
Do you have an internet connection for each site in your organisation?
yesno
New
If no, please describe the way that your sites are connected.
text
New
Please provide a list of networks that will be in scope for this assessment.
list
How many staff are home or remote workers?
number
How are home/remote workers connecting to your organisational data and services?
text
New
Please provide a list of network equipment that will be in scope for this assessment (including firewalls and routers).
list
If you are certifying as partial organisation, please list the equipment used to create any sub-sets.
list
New
Please list the quantities and operating systems for your laptops, desktops and virtual desktops within the scope of this assessment.
list
Please list the quantity of thin clients within the scope of this assessment. Please include make and operating systems.
list
New
Please list the quantity of servers, virtual servers, virtual server hosts (hypervisors) and Virtual Desktop Infrastructure (VDI) servers. You must include the operating system.
list
Please list the quantities of tablets and mobile devices within the scope of this assessment.
list
Please list all the cloud services that are in use by your organisation and provided by a third party.
list
Please provide the name and role of the person who is responsible for managing your IT systems in the scope of this assessment.
text
Does your organisation meet the Scope of Assessment requirements?
Check your real-world posture across all 5 Cyber Essentials control areas in 3 minutes. Free, no account needed.