Infrastructure The degree of development and maturity level of the ICT Infrastructure The robustness of network and security management procedures and practices Availability of supportive hardware that aids the correct functionality of the main hardware (e.g. email gateway, or surf controller, printers, switches, etc.) Specification of the data storage mechanisms (types, locations…) and level of backup performed. The level of upgrading and updating process (applications and systems). The availability of the policies and procedures that govern the technology related functions (e – Policies). The availability of Information Security metrics. The availability of an IT audit plan Processes The availability of the business collaboration tools. The availability of integrated functional workflow management system. The availability of the electronic services, offered both internally within the organization, and externally The service levels maintained. People The caliber of IT staff Qualifications and certifications obtained by the staff. Effectiveness of the internal training and capacity building plan.