Oredra Security Library
People & endpoints security questionnaire answers
Security training, phishing simulations, endpoint protection, and device management.
People & endpoints
Questions customers commonly ask.
People & endpoints
Do employees receive security awareness training?
Answer based on training your workforce actually receives. A security policy, onboarding conversation, or occasional reminder may be useful, but it should not be described as a recurring formal training program unless that is what your company operates.
Understand this questionPeople & endpoints
Do you conduct phishing simulations?
A phishing simulation is a controlled exercise that sends simulated phishing messages to evaluate or reinforce employee behavior. General awareness training and real phishing attempts do not automatically count as simulations.
Understand this questionPeople & endpoints
Do you use endpoint protection or anti-malware?
The reviewer is asking what protects laptops, desktops, servers, or other endpoints from malicious activity. A product license is not proof that every relevant endpoint is enrolled, active, monitored, or configured consistently.
Understand this questionPeople & endpoints
Do you centrally manage company devices or use MDM?
Mobile device management (MDM) or another endpoint-management platform can enforce settings on enrolled devices, but having the tool is not the same as managing every device. Verify which devices and users are actually in scope.
Understand this questionNot sure what your company can answer?
Check your questionnaire readiness in about three minutes.
See which common areas are clear, scattered, uncertain, or simply not something your company does today. It is not a compliance score.
Take the free readiness check