Ask yourself the following questions:
- If you have proper IT security, are you compliant within your industry?
- Is IT security just a tool stack or a process and procedure for your employees to follow?
- If you signed off on insurance to secure your compliant, are you 110% confident your IT department aligns with the insurance requirements?
- Can you regurgitate the insurance requirements?
