How mature is your cybersecurity programme?

Rate six domains aligned with the NIST Cybersecurity Framework and practical security validation. You will receive an indicative profile, an overall maturity level and two priority areas for improvement.

Adjust every slider to produce a representative profile.

Rate each domain (1 = ad hoc, 5 = optimised)

01 Identify & asset management Do you know your assets, their owners and the third parties on which you depend? 3 Defined
02 Protection & hardening Access control, secure configuration, patching and system hardening. 3 Defined
03 Detect & monitor Logging, monitoring and the ability to identify an intrusion early. 3 Defined
04 Incident response A tested plan, defined responsibilities and an escalation path outside working hours. 3 Defined
05 Recovery & resilience Protected backups, tested restoration and readiness for ransomware incidents. 3 Defined
06 Adversarial security validation Do practical tests demonstrate that your controls work against realistic attack techniques? 3 Defined

Overall maturity

Defined 3.0 / 5

Controls are documented and applied consistently. The next priorities are measurement, monitoring and practical validation.

Where to focus first
Identify & asset management	3 / 5 Recommended next steps Attack Surface Management
Protection & hardening	3 / 5 Recommended next steps Security Audits

Email me my profile Discuss the result

Indicative self-assessment; an engagement validates the result with evidence.

Helpful tools

01 Scope a test Create a scoped brief in one minute
02 NIS2 / DORA scope check Check whether the regulations apply to your organization
03 Sample report A complete sample report with evidence-backed findings from Critical to Low, CVSS scoring, OWASP mapping and a prioritized remediation plan.