Do you have an up-to-date inventory of all devices connected to your network, including IoT devices?

Do you know in real time how many devices are connected at each site?

Can you automatically identify what type of device each one is (laptop, mobile, printer, camera, medical sensor, payment terminal)?

Do you have visibility into each device's behavior on the network (what it accesses, when, from where)?

Do you detect when a new device connects to your network without prior authorization?

Do users and devices access only the resources they need for their role, and nothing else?

Do you have differentiated access policies by role (employee, executive, external provider, IoT device)?

Does your network automatically segment traffic so that a problem in one area does not spread to the rest?

Do you review and update access policies periodically and in a documented way?

Do you control which devices can access sensitive data (medical records, payment data, academic records)?

Does your system automatically detect anomalous behavior on the network?

Do you receive real-time alerts when something unusual happens on the network?

Can you isolate a compromised device from the network without disrupting the rest of the operation?

Do you have enough network activity logs to reconstruct an incident in the event of an audit?

Can your IT team respond to a security alert in less than 30 minutes?

Does your network architecture facilitate GDPR compliance by design, not as an after-the-fact patch?

Do you have technical documentation of the personal data flows that pass through your network?

Can you demonstrate in an audit who accessed what data and when?

Does your network comply with ENS requirements if you work with the Spanish Public Administration?

Have you assessed the impact of the NIS2 Directive on your network infrastructure?

Does your IT team spend more than 30% of its time resolving repetitive network incidents? (Answer "No" if this does NOT happen — that is positive)

Do new equipment or site deployments require extensive manual intervention? (Answer "No" if no manual intervention is required)

Do you have visibility into the real experience users have with critical applications (video calls, ERP, electronic health records)?

Can you manage your entire network from a single centralized console?

Can your network infrastructure scale without a complete redesign if your company grows or opens a new site?