ADX Group Logo
ADX GROUP Silent Innovation. Absolute Defense.
Self-Assessment Diagnostic

Free NDPA & Cybersecurity Readiness Check

A 10-question indicative self-assessment designed for Nigerian organizations. Answer each question to evaluate your data governance, email impersonation defense, access controls, and operational continuity posture.

Important Regulatory Notice: This self-check provides an indicative risk profile based strictly on self-reported inputs. It does not constitute a formal legal opinion, regulatory compliance certification, or statutory Data Protection Compliance Organisation (DPCO) audit return. Under the Nigeria Data Protection Act 2023, formal statutory filings must be conducted through a licensed DPCO.
Question 1 of 10 • Data Governance
Does your organization maintain a documented inventory of all personal customer and employee data collected, stored, and shared?
Why this matters: NDPA Section 24 requires clear records of data categories, processing purposes, and storage locations.
Question 2 of 10 • Data Governance
Have you formally designated an internal or external Data Protection Officer (DPO) responsible for privacy compliance?
Why this matters: Covered organizations processing significant data volumes must designate a qualified DPO.
Question 3 of 10 • Incident Response
Do you have a written, actionable Data Breach Response Plan with steps to notify authorities within statutory timelines?
Why this matters: Under the NDPA, reportable personal data breaches must be notified to the NDPC within 72 hours.
Question 4 of 10 • Identity Security
Is Multi-Factor Authentication (MFA) strictly enforced for all corporate email accounts and administrative cloud portals?
Why this matters: MFA blocks over 99% of automated credential stuffing and phishing takeovers.
Question 5 of 10 • Data Resilience
Are critical databases backed up off-site with encryption, and have you conducted a live restoration drill in the last 6 months?
Why this matters: An untested backup is not a recovery plan. Drills verify data can actually be restored after corruption.
Question 6 of 10 • Vendor Risk
Do you require written Data Processing Agreements (DPAs) or security commitments from all third-party software vendors?
Why this matters: Organizations remain responsible for personal data mishandled by external SaaS and cloud processors.
Question 7 of 10 • Email Security
Has your domain published active SPF, DKIM, and DMARC records to prevent external attackers from spoofing your corporate email?
Why this matters: Unenforced email authentication leaves customers and staff exposed to forged executive emails.
Question 8 of 10 • Staff Awareness
Have your employees completed cybersecurity hygiene and data protection awareness training within the past 12 months?
Why this matters: Human error is the leading vector for phishing and accidental data disclosures.
Question 9 of 10 • AI & Tool Governance
Does your company have documented rules restricting staff from uploading confidential data or customer files into public AI tools?
Why this matters: Public LLMs can ingest submitted text for retraining, leaking proprietary IP and customer secrets.
Question 10 of 10 • Access Management
Do you have an enforced offboarding checklist that revokes email, VPN, and database access immediately upon employee departure?
Why this matters: Stale credentials from former staff represent a top vector for unauthorized perimeter entry.

Receive Your Detailed Security & NDPA Summary

Enter your details below to save your assessment score and receive our technical remediation recommendations for your sector.

Chat with us