Further to my earlier post - what a clever initiative by Tesserent to put a cyber security questionnaire on their website. Those questions really seem to zero in on assessing how secure a business is from a cyber incident......
https://tesserent.com/security-consultation/security-audit/