📊 Dashboard
CIS Controls v8 Assessment Overview — CLA Hong Kong
Domain Scores
Score Distribution
Score Impact — Quick Remediations
| Scenario | Not | Partial | Mostly | Est. Score |
|---|---|---|---|---|
| Current Draft | 27 | 30 | 19 | 1.9 |
| + Security Awareness (done) | 17 | 35 | 22 | ~2.05 |
| + Quick Remediations #1-8 | 5 | 45 | 24 | ~2.25 |
Target: 2.25/4 (Moderate) before formal submission to CLA Global
Completed Deliverables
📋 Executive Summary
KPI cards, domain table, 3-phase roadmap, resource estimates
Status: Ready
📜 Program Policy
Security Awareness Program policy document (bilingual)
Status: Ready
🎓 Onboarding Slides
16 slides, bilingual (EN+ZH), covers all 10 CIS 14.x safeguards
Status: Ready
🔄 Annual Refresher
12 slides, bilingual, for annual recertification
Status: Ready
🎣 Phishing Templates
20 simulation templates + monthly schedule (GoPhish)
Status: Ready
📄 Quick Reference Card
Employee printable A5 card (bilingual)
Status: Ready
📅 Curriculum Schedule
Annual calendar + new hire checklist
Status: Ready
📋 Assessment Tracker
Track all 120 questions (84 CIS + 36 CPA Firm) — update current/target scores, add notes
| # | Domain | Heading | Answer | Notes | Current | Findings | Remediation | Target | Status |
|---|
🗺️ Remediation Roadmap
Quick wins and long-term improvements — check off as you complete
🎓 Training Center
Security awareness sessions, schedules, and materials
Policy Repository
Security policies and documentation
| Policy | Status | CIS Ref | Owner | Review Cycle | Action |
|---|
🖥️ Asset Register
Track all hardware and software assets — inventory, status, and warranty
| Asset ID | Type | Name | Assigned To | Status | Purchase Date | Warranty Expiry | Action |
|---|
🔗 Vendor Management
Service providers, contracts, SLAs and contacts
| Vendor | Service Type | Contract End | SLA | Contact | Phone | Status | Action |
|---|
📝 Change Log
Record and track all IT changes with approval workflow
| Date | Description | Requested By | Approved By | Impact | Status | Action |
|---|
🆘 Helpdesk
IT support ticket tracking and management
| Ticket ID | Requester | Issue Type | Priority | Status | Assigned To | Created | Action |
|---|
🔐 Compliance Tracker
Regulatory compliance status — PDPO, HKICPA, AFRC, ISO 27001
| Regulation | Requirement | Status | Next Review | Owner | Notes | Action |
|---|
📞 Key Contacts
IT team and vendor emergency contacts