A security questionnaire can make a broad worry easier to discuss. The useful result is a short list of questions to investigate, with evidence and an owner for each one.
Know what you’re using
The Cyber Craft questionnaire uses representative topics inspired by NIST CSF 2.0, ISO/IEC 27001, CIS Controls v8.1, SOC 2 and PCI DSS v4.0.1. It does not include every requirement or verify the controls in your systems.
For example, NIST CSF 2.0 organizes outcomes around Govern, Identify, Protect, Detect, Respond and Recover. ISO/IEC 27001 describes an information security management system. Use the official framework or standard when checking a specific requirement.
Make the answers useful
- Pick a relevant topic set. Start with a business concern or an actual customer requirement.
- Answer from what you can show. If you are unsure, record what needs checking instead of assuming a control works.
- Bring the right person in. The account owner, administrator or person doing the work may have the evidence you need.
- Choose a manageable next step. Give an unanswered question an owner, a check and a date to revisit it.
Understand the score
Answer every question in the selected set. Yes contributes 100, Partial contributes 50 and No contributes 0; the displayed score is the average. An unanswered question is not treated as No. Switching between sets keeps your answers for each one.
A higher score means more positive answers to this questionnaire. It is not a certification, compliance result or independent check of your systems.
Choose whether to save your answers
New answers are saved across visits only when you choose “Remember answers on this device.” Existing saved answers are restored. Turning the option off removes the saved copy while keeping the current answers in memory.
The questionnaire handles your answers in the browser; the page still loads ordinary website resources. Answers are not automatically included in a contact inquiry.
Take the questions into the next conversation
Download a text report or use the print option to keep a copy. Bring the answers you want to check, rather than treating the percentage as the goal.