How it works

Answer each question by picking the level that best describes your security operations today. Be honest: the gap list is only useful if it is true. Scores update as you go and a draft is kept in this browser until you reset it. When you are done, export the JSON to keep a dated record, and read using the results to turn the gaps into a roadmap.

Fictional answers, to see what a completed assessment looks like.

0 of 50 answered

Results

Overall maturity

–

Answer the questions to see your level.

Average level per domain (0 = Initial, 4 = Optimised)

Domain scores

Domain Answered Score Level Lowest question

Top gaps and recommended next steps

The 10 lowest-scoring answered questions. Each next step moves that question up one level.

# Question Domain Level Recommended next step