Security Assessment Questionnaire
Answer practical security questions and choose what to investigate next. This is a self-assessment, not a compliance audit.
Selected topics from NIST CSF 2.0, ISO/IEC 27001, CIS Controls v8.1, SOC 2, and PCI DSS v4.0.1.
Select Framework
Answers stay in this browser. Saving is optional; existing saved answers are restored. These are representative questions, not the full requirements of a framework.
Assessment Results
Questions to Review
Recommended next step
Use your results to choose the most practical first engagement.
Common questions
What does this questionnaire measure?
It summarizes your Yes, Partial, and No answers to representative security questions inspired by five frameworks. It does not cover every framework requirement or verify the controls in your systems.
How is the score calculated?
Answer every question in the selected framework. Yes contributes 100, Partial 50, and No 0; the score is their average. Unanswered questions are not treated as No answers. Switching frameworks preserves your answers.
Where are my answers stored?
Answers stay in this browser. New answers are saved across visits only if you enable Remember answers on this device. Existing saved answers are restored. Unchecking the option removes the saved copy while keeping current answers in memory.
Can I keep a copy of the results?
After completing the questionnaire, download a text report or use Print Report to print or save a PDF through your browser. Results are not a compliance certification.