As can be seen in the above sample, the security assessment is advised to at least include the following elements:
- Security inspector (person) name and department
- Date & time of assessment
- Carefully scoped structure
- Extra room for notes
- Detailed questions
It is important that the assessment details can be recorded efficiently and that they are automatically transferred to a central system: Mobile devices such as a tablet or smartphone are ideally suited for this task. Conducting security assessments through paper forms, pdf or word documents is also possible but has the disadvantage that the data still needs to be transferred to a central system as a separate action, which is error-prone and not real-time. To take this even one step further, you can use the Zapier app to automatically transfer data between over 750 apps.