Deeper domains
NIST, AI, insurer, vendor and standards-aligned question libraries.
Readiness Snapshot
How much of your trust posture can you prove today?
Answer seven questions to receive an immediate, indicative readiness band and three priority governance gaps. No registration is required.
TimeApproximately 3 minutes
DataProcessed in your browser
PurposeIndicative—not certification advice
Does a named executive or senior leader own cyber, governance and compliance risk?
Ownership turns risk from a technical concern into a managed business responsibility.
Are required standards and policies translated into owned controls and recurring review workflows?
Documents alone do not demonstrate that governance is operating.
Can your organisation quickly link key controls to current evidence from operational systems?
Traceable evidence is what makes assurance credible and repeatable.
Are incident response, recovery and continuity procedures documented and tested?
Resilience depends on tested response capability, not only preventive technology.
Do you know which AI tools and use cases are active, who owns them and how risk is reviewed?
AI adoption without inventory, accountability and guardrails creates unmanaged exposure.
Do suppliers and critical service providers undergo a repeatable risk review?
Your trust posture depends on external parties that handle data, systems or critical services.
Could you provide an insurer with a current, evidence-backed view of your control environment?
Insurer questions increasingly require more than policy documents and verbal assurance.
Select an answer before continuing.
0readiness
What a formal assessment adds
More depth, evidence and decision value.
Versioned scoring
Domain scores, maturity, critical overrides and prioritised findings.
Evidence review
Validate whether controls are designed, operating and traceable.
Executive report
Roadmap, assurance profile and clear management actions.