Skip to content

Solutions
Our solutions

Digital solutions combining strategy, technology, automation and people.

Go to overview

Menu

AI and machine learning

Data science and modelling

Generative AI

MLOps

Application engineering

Application modernisation

Custom software development

DevOps

Low-code and no-code application development

Platform engineering

Solution architecture and design

Business process solutions

Business process outsourcing

Business process re-engineering

Process automation

Cloud engineering

Cloud modernisation

Cloud strategy & architecture consulting

FinOps

Data solutions

Advanced analytics

Business intelligence

Data management

Data migration

Data strategy

Data warehouse

Digital experience platforms

Maintenance and support

Application maintenance & support

Quality solutions

Technology advisory
Industries

Industries

We provide solutions tailored to your sector to assist you in identifying opportunities, realising value and opening up new markets.

Go to overview

Healthcare

Media and publishing

Consumer and retail

Hi-tech and IOT

Travel

Logistics and supply chain

Education

Insurance

Banking
Our thinking

Our thinking

The latest updates to help future-focused organisations on the issues that matter most in business.

Go to overview

News
Keep up to date with company news and announcements at NashTech

Insights
The latest expertise and thought leadership from the NashTech and our clients

Resources
Expert guidance on everything from complex technological issues to current trends

Digital Leadership Report
Explore insights from the latest world's largest and longest-running study on technology leadership
Case studies
About us

About us

Find out what makes us who we are

Go to overview

Leadership
The diverse leadership team at NashTech

Nash Squared
A global professional services organisation with three key areas of focus

Vietnam 360°
Experience a 360 degree all-encompassing virtual tour of NashTech’s Vietnam offices

ESG
Discover our environmental, social and governance commitments

Diversity, equality and inclusion
Making diversity, equality and inclusion an integral part of our culture

Our locations
Discover our network of global offices, centres of excellence and innovation
English

Get in touch

Home / Readiness Assessment with NashTech / WAF assessment / WAF Audit Readiness Assessment

WAF Audit Readiness Assessment

Complete the questionnaire to find your state of WAF Audit readiness.

1.

How do you evaluate internal and external customer needs?

None

Stakeholder meetings

Workshops and documentation

User-centric design

Service level objectives and key performance indicators

Value stream mapping and feedback loops

None

2.

How does your organisational culture support your business outcomes?

None

Minimal support

Support awareness

Collaborative culture

Empowered teams

Continuous improvement culture

None

3.

Do resources, processes and procedures have identified owners?

No

Ad hoc ownership

Resource ownership

Ownership registry and accountability

Business-value driven ownership

Continuous improvement ownership

None

4.

How do you design your workload so that you can understand its state?

None

Limited Monitoring

Basic metrics and logging

Metrics, logs and tracing

Real-time monitoring and alerts

AI/ML powered observability

None

5.

How do you reduce defects, ease remediation and improve flow into production?

None

Limited quality assurance

Basic quality checks

Continuous integration

Continuous delivery

Continuous improvement and DevSecOps

None

6.

How do you secure account root users and properties?

None

Unprotected root user

Strong password policy

Multi factor authentication for root user

Locking away root user credentials

Limited usage and role-based access

None

7.

How do you evaluate and implement new security services and features regularly?

None

Reactive adoption

Occasional manual evaluation

Quarterly security reviews

Continuous monitoring and evaluation

DevSecOps and continuous improvement

None

8.

How do you automate testing and validation of security controls in pipelines?

None

Manual testing

Scripted testing

Automated scanning

Continuous security validation

DevSecOps and security as code

None

9.

How do you grant least privilege access?

None

Unrestricted access

Role-based access

Group-based access

Attribute-based access control (ABAC)

Policy-based and dynamic access control

None

10.

How do you share resources securely within your organisation?

None

No clear security measures

Basic access control

Role-based access control (RBAC)

Strong authentication and authorisation

Zero trust architecture

None

11.

How do you choose region based on both business requirements and sustainability goals?

None

Nearest region

Cost and latency

Cost-benefit analysis

Cloud provider tools

Comprehensive strategy

None

12.

How do you scale workload infrastructure dynamically?

None

Manual scaling

Scheduled scaling

Reactive auto-scaling

Predictive auto-scaling

Event-driven auto-scaling

None

13.

How do you optimise team member resources for activities performed?

None

Ad hoc assignments

Resource tracking

Resource management tools

Resource optimisation and sustainability consideration

Sustainable DevOps culture

None

14.

How do you optimise software and architecture for asynchronous and scheduled jobs?

None

Ad hoc execution

Basic scheduling

Queue-based system

Task orchestration and prioritisation

Event-driven microservices

None

15.

How do you optimise impact on devices and equipment?

None

Little optimisation

Basic awareness

Resource monitoring and reporting

Resource efficiency strategies

Sustainable infrastructure practices

None

16.

How do you implement cloud financial management?

None

Reactive monitoring (cost tracking)

Basic cost allocation and budgeting

Automation and optimisation

Continuous optimisation

FinOps and cloud governance

None

17.

Could you explain how you establish and manage cloud budgets and forecasts for your architecture's cloud resources?

No

Minimal budgeting

Basic budgeting

Moderate budgeting

Advanced budgeting

Best practice budgeting

None

18.

What proactive measures do you take to monitor and control costs in your cloud infrastructure or services?

None

Manual cost tracking

Basic cost alerts

Resource tagging

Automation and policy-based controls

Cost optimisation framework

None

19.

Can you quantify and measure the business value gained from your cost optimisation initiatives?

No

Ad hoc tracking

Basic cost metrics

Cost attribution

ROI calculation

Continuous improvement and forecasting

None

20.

Do you implement specific goals and targets for your application, and if so, how are they established and tracked?

None

No formalised goals or tracking

High-level non-specific objectives

Specific measurable and time-bound goals

Monitoring KPIs and regular reporting

Real-time monitoring and automation for goals

None

21.

How do you design your architecture to accommodate fixed service quotas and constraints effectively?

None

Basic monitoring

Quota awareness

Resource management

Quota prediction and optimisation

Quota governance and automation

None

22.

What tools or processes do you use to monitor and actively manage service quotas to prevent resource constraints?

None

Manual monitoring

Basic threshold alarms

Quota tracking and notifications

Auto-scaling and dynamic quota adjustment

Policy-driven quota management

None

23.

How do you plan your network topology?

None

No formal planning

Basic diagrams

Reactive planning

Proactive planning

Continuous improvement and automation

None

24.

Could you describe the process of provisioning redundant connectivity between private networks in your cloud environment and on-premises infrastructure?

No

Single network connection with no redundancy

Basic redundancy

Improved redundancy

High availability

Fully automated highly redundant and resilient network

None

25.

How do you design your workload service architecture?

None

Monolithic architecture

Basic microservices

Containerisation and orchestration

Serverless or function as a service (FAAS)

Event-driven scalable and resilient microservices

None

26.

How do you select the best-performing architecture?

None

Ad hoc decision

Reactive decision

Data-driven decision

Predictive optimisation

Continuous improvement and optimisation

None

27.

How can you factor cost requirements into decisions?

None

Little consideration of cost

Afterthought cost assessment

Early cost consideration

Integrated cost management

Automated cost optimisation

None

28.

How do you evaluate the available compute options?

None

Basic understanding

Awareness of containers

Practical VM and container usage

Multi-cloud and serverless exploration

Workload-centric optimisation

None

29.

How do you continually evaluate compute needs based on metrics?

None

Reactive evaluation

Scheduled evaluation

Metric-driven scaling

Predictive analytics

Continuous optimisation

None

30.

How do you make decisions based on access patterns and metrics?

None

Reactive decision-making

Basic monitoring

Data-driven decision-making

Automation and optimisation

Predictive and proactive optimisation

None

Time's up

Back to assessment

Your WAF Audit assessment score is ready

This score provides a starting point, but the real power lies in the personalised details waiting for you.

Fill out the form to schedule a free consultation with our experts to discuss personalised recommendations on your journey to the

Your WAF Audit Readiness score:

90/100

Book a free consultation

Contact details

Name*

E-mail address*

Job Title

Company

I agree to share my information with NashTech as per the privacy policy*.

* Required Fields

Almost there!

Would you like to take a moment to review your answers before we calculate your score?

Review Answers

View final result

Assessment - Your answers

Back to assessment

Save and view final result

NashTech

Menu

Contact us
Careers
Our locations

Home

Menu

Our solutions
Partners
Our thinking

Useful links

Menu

Readiness Assessment
Accelerators
Privacy policy
Modern slavery policy

Connect with us

LinkedIn
Twitter
Facebook
Youtube

Stay in the know with our newsletter

hive-employee-voice-certified-2023-white-png

| Part of Nash Squared

What are you looking for?

Popular keywords

Akka
Apache
Kafka
Scala
Nashtech

Let's create something great together

Our team will contact you soon.

Contact details

Name*

E-mail address*

Country*

Company Name*

Project details

How can we help you?

* Required Fields

I agree to share my information with NashTech as per the privacy policy*.

Scroll to Top

SAMPLE TITLE

sample short

sample heading lorem isump

Sample button

FREE WHITEPAPER

Unlock the power of knowledge with our new whitepaper

“Elevating User Experience for Product Owners”

Get your whitepaper

FREE WHITEPAPER

Unlock the power of knowledge with our new whitepaper

“Elevating User Experience for Product Owners”

Get your whitepaper

Thank you for contacting us

Your contact request was submitted successfully. A member of our team will be in touch within one business day. If your enquiry is urgent please email info@nashtechglobal.com.

Our solutions

Industries

Our thinking

About us

WAF Audit Readiness Assessment

Complete the questionnaire to find your state of WAF Audit readiness.

Your WAF Audit assessment score is ready

Your WAF Audit Readiness score:

Book a free consultation

Contact details

Almost there!

NashTech

Home

Useful links

Connect with us

Stay in the know with our newsletter

What are you looking for?

Popular keywords

Let's create something great together

Contact details

Project details