WAF Audit Readiness Assessment

How do you evaluate internal and external customer needs?

None

Stakeholder meetings

Workshops and documentation

User-centric design

Service level objectives and key performance indicators

Value stream mapping and feedback loops

How does your organisational culture support your business outcomes?

None

Minimal support

Support awareness

Collaborative culture

Empowered teams

Continuous improvement culture

Do resources, processes and procedures have identified owners?

Ad hoc ownership

Resource ownership

Ownership registry and accountability

Business-value driven ownership

Continuous improvement ownership

How do you design your workload so that you can understand its state?

None

Limited Monitoring

Basic metrics and logging

Metrics, logs and tracing

Real-time monitoring and alerts

AI/ML powered observability

How do you reduce defects, ease remediation and improve flow into production?

None

Limited quality assurance

Basic quality checks

Continuous integration

Continuous delivery

Continuous improvement and DevSecOps

How do you secure account root users and properties?

None

Unprotected root user

Strong password policy

Multi factor authentication for root user

Locking away root user credentials

Limited usage and role-based access

How do you evaluate and implement new security services and features regularly?

None

Reactive adoption

Occasional manual evaluation

Quarterly security reviews

Continuous monitoring and evaluation

DevSecOps and continuous improvement

How do you automate testing and validation of security controls in pipelines?

None

Manual testing

Scripted testing

Automated scanning

Continuous security validation

DevSecOps and security as code

How do you grant least privilege access?

None

Unrestricted access

Role-based access

Group-based access

Attribute-based access control (ABAC)

Policy-based and dynamic access control

10.

How do you share resources securely within your organisation?

None

No clear security measures

Basic access control

Role-based access control (RBAC)

Strong authentication and authorisation

Zero trust architecture

11.

How do you choose region based on both business requirements and sustainability goals?

None

Nearest region

Cost and latency

Cost-benefit analysis

Cloud provider tools

Comprehensive strategy

12.

How do you scale workload infrastructure dynamically?

None

Manual scaling

Scheduled scaling

Reactive auto-scaling

Predictive auto-scaling

Event-driven auto-scaling

13.

How do you optimise team member resources for activities performed?

None

Ad hoc assignments

Resource tracking

Resource management tools

Resource optimisation and sustainability consideration

Sustainable DevOps culture

14.

How do you optimise software and architecture for asynchronous and scheduled jobs?

None

Ad hoc execution

Basic scheduling

Queue-based system

Task orchestration and prioritisation

Event-driven microservices

15.

How do you optimise impact on devices and equipment?

None

Little optimisation

Basic awareness

Resource monitoring and reporting

Resource efficiency strategies

Sustainable infrastructure practices

16.

How do you implement cloud financial management?

None

Reactive monitoring (cost tracking)

Basic cost allocation and budgeting

Automation and optimisation

Continuous optimisation

FinOps and cloud governance

17.

Could you explain how you establish and manage cloud budgets and forecasts for your architecture's cloud resources?

Minimal budgeting

Basic budgeting

Moderate budgeting

Advanced budgeting

Best practice budgeting

18.

What proactive measures do you take to monitor and control costs in your cloud infrastructure or services?

None

Manual cost tracking

Basic cost alerts

Resource tagging

Automation and policy-based controls

Cost optimisation framework

19.

Can you quantify and measure the business value gained from your cost optimisation initiatives?

Ad hoc tracking

Basic cost metrics

Cost attribution

ROI calculation

Continuous improvement and forecasting

20.

Do you implement specific goals and targets for your application, and if so, how are they established and tracked?

None

No formalised goals or tracking

High-level non-specific objectives

Specific measurable and time-bound goals

Monitoring KPIs and regular reporting

Real-time monitoring and automation for goals

21.

How do you design your architecture to accommodate fixed service quotas and constraints effectively?

None

Basic monitoring

Quota awareness

Resource management

Quota prediction and optimisation

Quota governance and automation

22.

What tools or processes do you use to monitor and actively manage service quotas to prevent resource constraints?

None

Manual monitoring

Basic threshold alarms

Quota tracking and notifications

Auto-scaling and dynamic quota adjustment

Policy-driven quota management

23.

How do you plan your network topology?

None

No formal planning

Basic diagrams

Reactive planning

Proactive planning

Continuous improvement and automation

24.

Could you describe the process of provisioning redundant connectivity between private networks in your cloud environment and on-premises infrastructure?

Single network connection with no redundancy

Basic redundancy

Improved redundancy

High availability

Fully automated highly redundant and resilient network

25.

How do you design your workload service architecture?

None

Monolithic architecture

Basic microservices

Containerisation and orchestration

Serverless or function as a service (FAAS)

Event-driven scalable and resilient microservices

26.

How do you select the best-performing architecture?

None

Ad hoc decision

Reactive decision

Data-driven decision

Predictive optimisation

Continuous improvement and optimisation

27.

How can you factor cost requirements into decisions?

None

Little consideration of cost

Afterthought cost assessment

Early cost consideration

Integrated cost management

Automated cost optimisation

28.

How do you evaluate the available compute options?

None

Basic understanding

Awareness of containers

Practical VM and container usage

Multi-cloud and serverless exploration

Workload-centric optimisation

29.

How do you continually evaluate compute needs based on metrics?

None

Reactive evaluation

Scheduled evaluation

Metric-driven scaling

Predictive analytics

Continuous optimisation

30.

How do you make decisions based on access patterns and metrics?

None

Reactive decision-making

Basic monitoring

Data-driven decision-making

Automation and optimisation

Predictive and proactive optimisation

Unsere Lösungen

Branchen

Gesundheitswesen

Medien und Verlagswesen

Einzelhandel

Hightech und IoT

Reisebranche

Logistik und Supply Chain

Bildungswesen

Finanzdienstleistungen und Versicherungen

Unsere Mission

News

Ressourcen

Ressourcen

Bericht zur digitalen Führung

Über uns

Führungsteam

Nash Squared

Vietnam 360°

ESG

Vielfalt, Gleichstellung und Integration

Unsere Standorte

WAF Audit Readiness Assessment

Schreibe einen Kommentar Antworten abbrechen

NashTech

Home

Useful links

Connect with us

Bleiben Sie mit unserem Newsletter auf dem Laufenden

Wonach suchen Sie?

Beliebte Schlüsselwörter

Kontaktangaben

Details zum Projekt

Unsere Lösungen

Branchen

Unsere Mission

Über uns

Schreibe einen Kommentar Antworten abbrechen

NashTech

Home

Useful links

Connect with us

Bleiben Sie mit unserem Newsletter auf dem Laufenden

Wonach suchen Sie?

Beliebte Schlüsselwörter

Lassen Sie uns gemeinsam etwas Großartiges schaffen

Kontaktangaben

Details zum Projekt