Compliance Readiness Assessments
Benchmark your readiness against a framework’s own published requirements and leave with a domain-by-domain score and a prioritized action plan — not a lead-gen quiz dressed up as one.
Readiness assessments
Every question maps to a specific published requirement. You get an indicative readiness score per domain, your gaps explained, and a Now / Next / Later remediation roadmap.
NIS2 Readiness Assessment
18 questions drawn directly from NIS2's own governance, risk-management, incident-reporting, and supply-chain requirements — with a domain-by-domain readiness score, not just one number.
EU CRA Readiness Assessment
18 questions drawn directly from the Cyber Resilience Act's own product-security lifecycle requirements — classification, secure-by-design, vulnerability handling, and reporting — with a domain-by-domain readiness score.
ISO 27001 Readiness Assessment
18 questions drawn directly from ISO/IEC 27001:2022's own management-system requirements and Annex A controls — with a domain-by-domain ISMS readiness score.
SOC 2 Readiness Assessment
18 questions drawn directly from the AICPA Trust Services Criteria's own Common Criteria — with a domain-by-domain readiness score for your SOC 2 attestation.
CMMC Level 2 Readiness Assessment
18 questions drawn directly from NIST SP 800-171's own control families and CMMC 2.0's program requirements — with a domain-by-domain readiness score. Not an official CMMC assessment and does not produce an SPRS score.
Calculators
Computed directly from a regulation’s own published figures. A calculator returns a number, not a readiness score — it does not assess your programme.
Every assessment on this page is a self-assessment tool, not an audit, certification, or legal opinion. Each produces an indicative readiness score from your own answers, not an independent verification of compliance.