Can your employees spot a phishing email?
Do you know where all of your sensitive data is?
Do you know how an attacker could get into your network?
Have you got visibility around the weak points of your network?
Are you getting the most out of current security tools?
Is your signature based AV giving you the best protection?
Do you know who has access to what?