Health Assessment | First Step Solutions

Contact Information

Name

Phone

Company Name

Business Information

Number of Employees

Number of Locations

Industry

Remote/Hybrid Workforce?

Biggest business goal this year?

Biggest technology frustration?

IT Leadership & Strategy

Do you have an internal IT Leader?

Do you use an MSP for IT support?

Who makes the final IT decisions?

Do you have a written IT roadmap?

Do you track IT KPIs?

Is IT aligned with business goals?

Biggest leadership gap in IT?

Cybersecurity

Is MFA enabled for email?

Is MFA enabled for all critical systems?

Do you have endpoint protection?

Does your firewall have active security services?

Do you conduct phishing/security training?

Do you have cyber insurance?

Have you had a security incident in the last 24 months?

Do you have written security policies?

Do you perform vulnerability scans?

Biggest security concern?

Infrastructure & Systems

Primary environment location

Number of servers

Main email platform

Any end-of-life servers or systems?

Network equipment age

Internet redundancy

Documented network diagram

Known recurring outages?

Biggest infrastructure pain point?

Backup & Disaster Recovery

Do you have backups?

What is backed up?

Application Data & Configurations

Customer Relationship Management (CRM) Data (e.g.

Databases (e.g.

Employee Workstations & Laptops (Endpoint Backups)

Financial & Accounting Records (e.g.

Human Resources & Employee Records

Intellectual Property & Source Code

Local Physical Servers & Virtual Machines (VMs)

Productivity Suite Files & Cloud Drives (e.g.

Shared Network Network-Attached Storage (NAS) / File Servers

Website Files & Source Code

Work Emails

Other / Not Sure

Are backups monitored?

Are backups tested?

Do you have a disaster recovery plan?

Do you have a continuity strategy?

Maximum acceptable downtime?

Maximum acceptable data loss?

Biggest recovery concern?

Helpdesk & Support

How do users primarily request support?

Do you use a ticketing system?

Average response time

Are issues categorized/prioritized?

Do you have documented SOPs?

Are recurring issues tracked?

User satisfaction with IT

Biggest support issue?

Vendors, Contracts & Licensing

Contact Information

First name*

Last name*

Email*

Phone*

Company name*

Business Information

Number of Employees*

Number of Locations*

Industry*

Remote/Hybrid Workforce?*

Biggest business goal this year?*

Biggest technology frustration?*

IT Leadership & Strategy

Do you have an internal IT leader?*

Do you use an MSP/vendor for IT support?*

Who makes the final IT decisions?*

Do you have a written IT roadmap?*

Do you review IT performance with leadership?*

Do you track IT KPIs?*

Are IT priorities tied to business goals?*

Biggest leadership gap in IT?*

Cybersecurity

Is MFA enabled for email?*

Is MFA enabled for all critical systems?*

Do you have endpoint protection/EDR?*

Do you have a firewall with active security services?*

Do you conduct phishing/security training?*

Do you have cyber insurance?*

Have you had a security incident in the last 24 months?*

Do you have written security policies?*

Do you perform vulnerability scans?*

Biggest security concern?*

Infrastructure & Systems

Primary environment*

Main email platform*

Number of servers*

Any end-of-life servers or systems?*

Network equipment age*

Internet redundancy*

Documented network diagram*

Known recurring outages?

Biggest infrastructure pain point?*

Backup & Disaster Recovery

Do you have backups?*

What is backed up?*

Application Data & Configurations

Customer Relationship Management (CRM) Data (e.g., Salesforce, HubSpot)

Databases (e.g., SQL, Oracle, MongoDB)

Employee Workstations & Laptops (Endpoint Backups)

Financial & Accounting Records (e.g., QuickBooks, ERP systems)

Human Resources & Employee Records

Intellectual Property & Source Code

Local Physical Servers & Virtual Machines (VMs)

Productivity Suite Files & Cloud Drives (e.g., Google Drive, OneDrive)

Shared Network Network-Attached Storage (NAS) / File Servers

Website Files & Source Code

Work Emails, Calendars & Messaging History (e.g., Outlook, Slack)

Other / Not Sure

Are backups monitored?*

Are backups tested?

Do you have a disaster recovery plan?

Do you have a business continuity plan?

Maximum acceptable downtime?*

Maximum acceptable data loss?*

Biggest recovery concern?*

Helpdesk & Support

How do users request support?*

Do you use a ticketing system?*

Average response time?*

Are issues categorized/prioritized?*

Do you have documented SOPs?*

Are recurring issues tracked?*

User satisfaction with IT (1 Bad - 4 Good)*

Biggest support issue?*

Vendors, Contracts & Licensing

List major IT Vendors*

Do you review vendor contracts annually?*

Do you know your monthly IT spend?*

Any overlapping software/tools?*

Are licenses regularly audited?*

Are vendor SLAs documented?*

Biggest vendor frustration?*

Compliance & Risk

What compliance requirements are you subject to?*

CMMC (Cybersecurity Maturity Model Certification)

COPPA (Children's Online Privacy Protection Act)

DFARS (Defense Federal Acquisition Regulation Supplement)

FedRAMP (Federal Risk and Authorization Management Program)

FTC Safeguards Rule

GDPR (General Data Protection Regulation)

HIPAA / HITECH (Health Insurance Portability and Accountability Act)

NERC CIP (Critical Infrastructure Protection)

NIST SP 800-53 / NIST CSF (Cybersecurity Framework)

NYDFS Part 500 (New York Department of Financial Services)

PCI-DSS (Payment Card Industry Data Security Standard)

SOX (Sarbanes-Oxley Act)

SOC 1 / SOC 2 / SOC 3 Compliance

State-Level Data Privacy Acts (e.g., CCPA/CPRA, VCDPA, CPA)

UK GDPR / Data Protection Act 2018

We are not subject to any formal regulatory compliance requirements

Other Regulatory Framework / Industry-Specific Standard

Not Sure

Do you have written IT policies?*

Do you conduct annual(or more frequent) risk assessments?*

Do you maintain asset inventory?*

Are priviledged accounts reviewed?*

Do you have incident response procedures?*

Biggest compliance concern?*

Budget & Planning

Approximate annual IT budget?*

Is IT budget planned annually?*

Do you have lifecycle replacement plans?*

Are major IT projects budgeted in advance?*

Are surprise IT costs common?*

Do leaders feel IT spending is clear?*

Biggest budget concern?*

Growth & Opportunities

Are you opening new locations?*

Hiring/growth expected this year?*

Any major system upgrades planned?*

Interested in automation/AI?*

Current manual processes that waste time?*

Misc.

What does your organization currently do well with technology? (Strengths)*

Where does technology slow you down or create risk? (Weaknesses)*

What technology improvements would create the most business value? (Opportunities)*

What technology issue could seriously disrupt operations? (Threats)*

Contact Information

Name

Phone

Company Name

Business Information

Number of Employees

Number of Locations

Industry

Remote/Hybrid Workforce?

Biggest business goal this year?

Biggest technology frustration?

IT Leadership & Strategy

Do you have an internal IT Leader?

Do you use an MSP for IT support?

Who makes the final IT decisions?

Do you have a written IT roadmap?

Contact Information

First name*

Last name*

Email*

Phone*

Company name*

Business Information

Number of Employees*

Number of Locations*

Industry*

Remote/Hybrid Workforce?*

Biggest business goal this year?*

Biggest technology frustration?*

IT Leadership & Strategy

Do you have an internal IT leader?*

Do you use an MSP/vendor for IT support?*

Who makes the final IT decisions?*

Do you have a written IT roadmap?*

Do you review IT performance with leadership?*

Do you track IT KPIs?*

Are IT priorities tied to business goals?*

Biggest leadership gap in IT?*

Cybersecurity

Is MFA enabled for email?*

Is MFA enabled for all critical systems?*

Do you have endpoint protection/EDR?*

Do you have a firewall with active security services?*

Do you conduct phishing/security training?*

Do you have cyber insurance?*

Have you had a security incident in the last 24 months?*

Do you have written security policies?*

Do you perform vulnerability scans?*

Biggest security concern?*

Infrastructure & Systems

Primary environment*

Main email platform*

Number of servers*

Any end-of-life servers or systems?*

Network equipment age*

Internet redundancy*

Documented network diagram*

Known recurring outages?

Biggest infrastructure pain point?*

Backup & Disaster Recovery

Do you have backups?*

What is backed up?*

Application Data & Configurations

Customer Relationship Management (CRM) Data (e.g., Salesforce, HubSpot)

Databases (e.g., SQL, Oracle, MongoDB)

Employee Workstations & Laptops (Endpoint Backups)

Financial & Accounting Records (e.g., QuickBooks, ERP systems)

Human Resources & Employee Records

Intellectual Property & Source Code

Local Physical Servers & Virtual Machines (VMs)

Productivity Suite Files & Cloud Drives (e.g., Google Drive, OneDrive)

Shared Network Network-Attached Storage (NAS) / File Servers

Website Files & Source Code

Work Emails, Calendars & Messaging History (e.g., Outlook, Slack)

Other / Not Sure

Are backups monitored?*

Are backups tested?

Do you have a disaster recovery plan?

Do you have a business continuity plan?

Maximum acceptable downtime?*

Maximum acceptable data loss?*

Biggest recovery concern?*

Helpdesk & Support

How do users request support?*

Do you use a ticketing system?*

Average response time?*

Are issues categorized/prioritized?*

Do you have documented SOPs?*

Are recurring issues tracked?*

User satisfaction with IT (1 Bad - 4 Good)*

Biggest support issue?*

Vendors, Contracts & Licensing

List major IT Vendors*

Do you review vendor contracts annually?*

Do you know your monthly IT spend?*

Any overlapping software/tools?*

Are licenses regularly audited?*

Are vendor SLAs documented?*

Biggest vendor frustration?*

Compliance & Risk

What compliance requirements are you subject to?*

CMMC (Cybersecurity Maturity Model Certification)

COPPA (Children's Online Privacy Protection Act)

DFARS (Defense Federal Acquisition Regulation Supplement)

FedRAMP (Federal Risk and Authorization Management Program)

FTC Safeguards Rule

GDPR (General Data Protection Regulation)

HIPAA / HITECH (Health Insurance Portability and Accountability Act)

NERC CIP (Critical Infrastructure Protection)

NIST SP 800-53 / NIST CSF (Cybersecurity Framework)

NYDFS Part 500 (New York Department of Financial Services)

PCI-DSS (Payment Card Industry Data Security Standard)

SOX (Sarbanes-Oxley Act)

SOC 1 / SOC 2 / SOC 3 Compliance

State-Level Data Privacy Acts (e.g., CCPA/CPRA, VCDPA, CPA)

UK GDPR / Data Protection Act 2018

We are not subject to any formal regulatory compliance requirements

Other Regulatory Framework / Industry-Specific Standard

Not Sure

Do you have written IT policies?*

Do you conduct annual(or more frequent) risk assessments?*

Do you maintain asset inventory?*

Are priviledged accounts reviewed?*

Do you have incident response procedures?*

Biggest compliance concern?*

Budget & Planning

Approximate annual IT budget?*

Is IT budget planned annually?*

Do you have lifecycle replacement plans?*

Are major IT projects budgeted in advance?*

Are surprise IT costs common?*

Do leaders feel IT spending is clear?*

Biggest budget concern?*

Growth & Opportunities

Are you opening new locations?*

Hiring/growth expected this year?*

Any major system upgrades planned?*

Interested in automation/AI?*

Current manual processes that waste time?*

Misc.

What does your organization currently do well with technology? (Strengths)*

Where does technology slow you down or create risk? (Weaknesses)*

What technology improvements would create the most business value? (Opportunities)*

What technology issue could seriously disrupt operations? (Threats)*

Contact Information

Name

Phone

Company Name

Business Information

Number of Employees

Number of Locations

Industry

Remote/Hybrid Workforce?

Biggest business goal this year?

Biggest technology frustration?

IT Leadership & Strategy

Do you have an internal IT Leader?

Do you use an MSP for IT support?

Contact Information

First name*

Last name*

Email*

Phone*

Company name*

Business Information

Number of Employees*

Number of Locations*

Industry*

Remote/Hybrid Workforce?*

Biggest business goal this year?*

Biggest technology frustration?*

IT Leadership & Strategy

Do you have an internal IT leader?*

Do you use an MSP/vendor for IT support?*

Who makes the final IT decisions?*

Do you have a written IT roadmap?*

Do you review IT performance with leadership?*

Do you track IT KPIs?*

Are IT priorities tied to business goals?*

Biggest leadership gap in IT?*

Cybersecurity

Is MFA enabled for email?*

Is MFA enabled for all critical systems?*

Do you have endpoint protection/EDR?*

Do you have a firewall with active security services?*

Do you conduct phishing/security training?*

Do you have cyber insurance?*

Have you had a security incident in the last 24 months?*

Do you have written security policies?*

Do you perform vulnerability scans?*

Biggest security concern?*

Infrastructure & Systems

Primary environment*

Main email platform*

Number of servers*

Any end-of-life servers or systems?*

Network equipment age*

Internet redundancy*

Documented network diagram*

Known recurring outages?

Biggest infrastructure pain point?*

Backup & Disaster Recovery

Do you have backups?*

What is backed up?*

Application Data & Configurations

Customer Relationship Management (CRM) Data (e.g., Salesforce, HubSpot)

Databases (e.g., SQL, Oracle, MongoDB)

Employee Workstations & Laptops (Endpoint Backups)

Financial & Accounting Records (e.g., QuickBooks, ERP systems)

Human Resources & Employee Records

Intellectual Property & Source Code

Local Physical Servers & Virtual Machines (VMs)

Productivity Suite Files & Cloud Drives (e.g., Google Drive, OneDrive)

Shared Network Network-Attached Storage (NAS) / File Servers

Website Files & Source Code

Work Emails, Calendars & Messaging History (e.g., Outlook, Slack)

Other / Not Sure

Are backups monitored?*

Are backups tested?

Do you have a disaster recovery plan?

Do you have a business continuity plan?

Maximum acceptable downtime?*

Maximum acceptable data loss?*

Biggest recovery concern?*

Helpdesk & Support

How do users request support?*

Do you use a ticketing system?*

Average response time?*

Are issues categorized/prioritized?*

Do you have documented SOPs?*

Are recurring issues tracked?*

User satisfaction with IT (1 Bad - 4 Good)*

Biggest support issue?*

Vendors, Contracts & Licensing

List major IT Vendors*

Do you review vendor contracts annually?*

Do you know your monthly IT spend?*

Any overlapping software/tools?*

Are licenses regularly audited?*

Are vendor SLAs documented?*

Biggest vendor frustration?*

Compliance & Risk

What compliance requirements are you subject to?*

CMMC (Cybersecurity Maturity Model Certification)

COPPA (Children's Online Privacy Protection Act)

DFARS (Defense Federal Acquisition Regulation Supplement)

FedRAMP (Federal Risk and Authorization Management Program)

FTC Safeguards Rule

GDPR (General Data Protection Regulation)

HIPAA / HITECH (Health Insurance Portability and Accountability Act)

NERC CIP (Critical Infrastructure Protection)

NIST SP 800-53 / NIST CSF (Cybersecurity Framework)

NYDFS Part 500 (New York Department of Financial Services)

PCI-DSS (Payment Card Industry Data Security Standard)

SOX (Sarbanes-Oxley Act)

SOC 1 / SOC 2 / SOC 3 Compliance

State-Level Data Privacy Acts (e.g., CCPA/CPRA, VCDPA, CPA)

UK GDPR / Data Protection Act 2018

We are not subject to any formal regulatory compliance requirements

Other Regulatory Framework / Industry-Specific Standard

Not Sure

Do you have written IT policies?*

Do you conduct annual(or more frequent) risk assessments?*

Do you maintain asset inventory?*

Are priviledged accounts reviewed?*

Do you have incident response procedures?*

Biggest compliance concern?*

Budget & Planning

Approximate annual IT budget?*

Is IT budget planned annually?*

Do you have lifecycle replacement plans?*

Are major IT projects budgeted in advance?*

Are surprise IT costs common?*

Do leaders feel IT spending is clear?*

Biggest budget concern?*

Growth & Opportunities

Are you opening new locations?*

Hiring/growth expected this year?*

Any major system upgrades planned?*

Interested in automation/AI?*

Current manual processes that waste time?*

Misc.

What does your organization currently do well with technology? (Strengths)*

Where does technology slow you down or create risk? (Weaknesses)*

What technology improvements would create the most business value? (Opportunities)*

What technology issue could seriously disrupt operations? (Threats)*

Name

Phone

Company Name

Number of Employees

Contact Information

First name*

Last name*

Email*

Phone*

Company name*

Business Information

Number of Employees*

Number of Locations*

Industry*

Remote/Hybrid Workforce?*

Biggest business goal this year?*

Biggest technology frustration?*

IT Leadership & Strategy

Do you have an internal IT leader?*

Do you use an MSP/vendor for IT support?*

Who makes the final IT decisions?*

Do you have a written IT roadmap?*

Do you review IT performance with leadership?*

Do you track IT KPIs?*

Are IT priorities tied to business goals?*

Biggest leadership gap in IT?*

Cybersecurity

Is MFA enabled for email?*

Is MFA enabled for all critical systems?*

Do you have endpoint protection/EDR?*

Do you have a firewall with active security services?*

Do you conduct phishing/security training?*

Do you have cyber insurance?*

Have you had a security incident in the last 24 months?*

Do you have written security policies?*

Do you perform vulnerability scans?*

Biggest security concern?*

Infrastructure & Systems

Primary environment*

Main email platform*

Number of servers*

Any end-of-life servers or systems?*

Network equipment age*

Internet redundancy*

Documented network diagram*

Known recurring outages?

Biggest infrastructure pain point?*

Backup & Disaster Recovery

Do you have backups?*

What is backed up?*

Application Data & Configurations

Customer Relationship Management (CRM) Data (e.g., Salesforce, HubSpot)

Databases (e.g., SQL, Oracle, MongoDB)

Employee Workstations & Laptops (Endpoint Backups)

Financial & Accounting Records (e.g., QuickBooks, ERP systems)

Human Resources & Employee Records

Intellectual Property & Source Code

Local Physical Servers & Virtual Machines (VMs)

Productivity Suite Files & Cloud Drives (e.g., Google Drive, OneDrive)

Shared Network Network-Attached Storage (NAS) / File Servers

Website Files & Source Code

Work Emails, Calendars & Messaging History (e.g., Outlook, Slack)

Other / Not Sure

Are backups monitored?*

Are backups tested?

Do you have a disaster recovery plan?

Do you have a business continuity plan?

Maximum acceptable downtime?*

Maximum acceptable data loss?*

Biggest recovery concern?*

Helpdesk & Support

How do users request support?*

Do you use a ticketing system?*

Average response time?*

Are issues categorized/prioritized?*

Do you have documented SOPs?*

Are recurring issues tracked?*

User satisfaction with IT (1 Bad - 4 Good)*

Biggest support issue?*

Vendors, Contracts & Licensing

List major IT Vendors*

Do you review vendor contracts annually?*

Do you know your monthly IT spend?*

Any overlapping software/tools?*

Are licenses regularly audited?*

Are vendor SLAs documented?*

Biggest vendor frustration?*

Compliance & Risk

What compliance requirements are you subject to?*

CMMC (Cybersecurity Maturity Model Certification)

COPPA (Children's Online Privacy Protection Act)

DFARS (Defense Federal Acquisition Regulation Supplement)

FedRAMP (Federal Risk and Authorization Management Program)

FTC Safeguards Rule

GDPR (General Data Protection Regulation)

HIPAA / HITECH (Health Insurance Portability and Accountability Act)

NERC CIP (Critical Infrastructure Protection)

NIST SP 800-53 / NIST CSF (Cybersecurity Framework)

NYDFS Part 500 (New York Department of Financial Services)

PCI-DSS (Payment Card Industry Data Security Standard)

SOX (Sarbanes-Oxley Act)

SOC 1 / SOC 2 / SOC 3 Compliance

State-Level Data Privacy Acts (e.g., CCPA/CPRA, VCDPA, CPA)

UK GDPR / Data Protection Act 2018

We are not subject to any formal regulatory compliance requirements

Other Regulatory Framework / Industry-Specific Standard

Not Sure

Do you have written IT policies?*

Do you conduct annual(or more frequent) risk assessments?*

Do you maintain asset inventory?*

Are priviledged accounts reviewed?*

Do you have incident response procedures?*

Biggest compliance concern?*

Budget & Planning

Approximate annual IT budget?*

Is IT budget planned annually?*

Do you have lifecycle replacement plans?*

Are major IT projects budgeted in advance?*

Are surprise IT costs common?*

Do leaders feel IT spending is clear?*

Biggest budget concern?*

Growth & Opportunities

Are you opening new locations?*

Hiring/growth expected this year?*

Any major system upgrades planned?*

Interested in automation/AI?*

Current manual processes that waste time?*

Misc.

What does your organization currently do well with technology? (Strengths)*

Where does technology slow you down or create risk? (Weaknesses)*

What technology improvements would create the most business value? (Opportunities)*

What technology issue could seriously disrupt operations? (Threats)*