Compliance readiness · 2 minutes
How audit-ready are you?
Pick the framework you care about, answer twelve quick questions, and get an honest read on where you stand, plus the areas to fix first. Nothing is stored; your headline score is yours.
Compliance readiness check
Step 1 of 2. Which framework are you assessing against?
What it covers
What the check asks about
You answer twelve questions with yes, partly or no, across three themes. The questions are the same whichever framework you pick, so this tests your general foundations. It is not a clause-by-clause gap analysis.
- Governance: a named owner, approved security policies, a risk assessment in the last 12 months, and a supplier risk register.
- Controls: multi-factor authentication, asset and data inventory, access reviews, tested backups and an incident-response plan, scanning and patching, encryption, and awareness training.
- Evidence: whether you collect and keep proof that your controls operate over time.
Your result
How to read your score
A yes scores one point, partly scores half and no scores nothing. Your total is shown as a percentage, with the number of areas that need attention and the themes they fall under.
| Score | Result | What it usually means |
|---|---|---|
| 75% or more | Strong foundations | Most of the basics are in place. Look closely at any partly answers and at how much evidence you hold. |
| 40% to 74% | Developing | Some controls exist, but ownership or evidence is likely to be uneven. Start with the themes your result names. |
| Below 40% | Foundational | Put ownership, a risk assessment and core controls in place before you plan an audit. |
Its limits
What a score does not tell you
A high score is not a certificate or a statement of compliance. Certification is delivered through certified assessment partners, who audit independently.
DORA, NIS2 and the EU AI Act are legal duties, so whether and how they apply depends on your organisation, and a short self-assessment cannot settle that. To go through your answers against a specific framework, book a 30-minute call.
Read about each framework