The Information Protection Assessment Kit (IPAK) is a tool intended to help you determine how well your organization's information protection program is doing and where it should go in the future. Quick and easy to complete, the IPAK can be used regularly to gain a snapshot of where your program is at a given time, as well as a measurement of its progress over time. Download a sample here.

The IPAK includes 15 basic categories with 20 statements in each, with references to relevant sections of ISO's International Standards:

1. Information Protection Program and Administration
2. Personnel Policies and Practices, including Social Networking Best Practices
3. Physical Security
4. Business Process Controls
5. Backup and Recovery Measures
6. End-User Controls
7. Network Security Controls
8. Internet Security Controls
9. Web Security Controls
10. Telecommunications and Remote Access Security Controls
11. Internet Commerce Controls
12. Wireless and Mobile Computing Security Controls
13. Legislative Controls
14. Application Security Controls
15. Mergers, Acquisitions and Divestitures

Formatted in Microsoft Excel, each category has its own answer sheet on a separate tab. The statements are grouped into related sections and the answer sheets require only one selection from a set of answers. Upon completion, the IPAK will automatically give you a score that provides you with clear, easily grasped numbers that you can present to management to give a snapshot of where your program is and where it should go. 

Download a sample here.

CSI Members receive special discounted rates on IPAK purchases.