Thank you for your cooperation in the Assured security assessment. Some points to keep in mind when answering our security assessment.

How to answer the security assessment

With Assured' security assessment platform, you can manage the security measures and postures of your product by completing our security assessment. Each assessment result can be RE-USED. It's recommended to create ONE assessment result per product; consider your organizational structure and infrastructure if necessary.

Tips for Answering

• User companies will have direct visibility of the provided answers. For internal notes, USE the MEMO feature.
• If the response varies based on factors such as higher-tier plans or attached options, please select "Condition Applies" and provide details of the conditions under which it applies.
• If using outsourced/third-party providers and/or relying on other cloud services (ex. IaaS), consider their security measures for overall product security.
• If security measures are implemented but not publicly disclosed, select applicable options and note "Details not publicly available." DO NOT just select "Undisclosed."

Instructions for answering on the console

How to Select Options/Answers

On your account's console, you can select the appropriate option(s) by clicking on the checkbox for each question and completing your answer by clicking the "Answer" button.

For questions where "Condition Applies" is available, you can toggle between "Not Applicable," "Applicable," and "Condition Applies" by clicking the checkbox multiple times. You can determine this through the indicator at the bottom of the checkbox.

After completing assessment

After completion of answering all questions, please click "Request Review" at the top left corner of the screen.

Examples and Acknowledgements

Keep in mind that your responses can be reused and re-shared with different companies.

User companies will have direct visibility of the provided answers. For internal notes, USE the MEMO feature. Also, DO NOT include a specific client’s name in the answers.

Answer Examples

✅ Good

Question: Is it possible to output the list of service users' accounts as a CSV file?

Answer: Yes

Note: We do not have a CSV output function, but if you contact us, we can send you a CSV of the account list.

❌ Bad

Question: Is it possible to output the list of accounts of service users as CSV?

Answer: Yes

Note: The list of accounts for Client A is here: https://internal.admin.example.com/csv/a/

For answers based on public information, please include the source of information.

If there is any public information, such as privacy policy or terms of use, please provide a link to it.

✅ Good

Question: Do you use personal information (please state the purpose of use)?

Answer: Yes

Note:

(1) Use for our other services.

(2) To provide information on events, seminars, etc.

https://example.com/privacypolicy

❌ Bad

Question: Do you use personal information (please indicate the purpose of use)?

Answer: Yes

Note:

(1) Use for other various services operated by the Company

(2) Invitations to events, seminars, etc.

Please answer not only for the measures implemented by your company but also the security measures for the entire cloud service.

If you use external platforms or subcontractors to provide services, please answer based on their security measures.

✅ Good

Question: Please select the physical security of your data center

Answer: Restrict access by IC card, install surveillance cameras, monitor logs

Note: We are using IaaS.

❌ Bad

Question: Please select the physical security of your data center

Answer: Not Applicable

Note: We use IaaS, so we do not have a data center

If you choose "Undisclosed" for the details of security measures implemented, please indicate so in the supplement.

If the answer is "Undisclosed" even though security measures are implemented, the score will be calculated with the same rating as "not implemented" in the security evaluation.

If you have implemented security measures, please select "Yes/Implemented" as an option and indicate in the supplement that the details are not disclosed.

✅ Good

Question: Do you take backups of your data (please indicate the frequency)?

Answer: Yes

Note: Yes, but the frequency is not disclosed.

❌ Bad

Question: Do you back up your data (indicate the frequency in the supplement)?

Answer: Undisclosed

Note: Yes, but the frequency is not disclosed.