Free Compliance Readiness Assessments

Assess your SOC 2 readiness for both Type I (control design) and Type II (operating effectiveness). Get a detailed gap analysis, section scores, and a personalised action plan before engaging your CPA firm.

Assess your readiness for ISO 27001 certification. Understand your ISMS maturity across governance, risk management, controls, and audit requirements before engaging a certification body.

Assess your ISO 27017 cloud security readiness. Understand your cloud-specific control gaps and shared responsibility implementation before a third-party cloud security audit.

Assess your ISO 42001 AI management system readiness. Understand your AI governance, risk assessment, data governance, and human oversight gaps before pursuing certification or regulatory compliance.

Assess your ISO 27002:2022 controls readiness. Understand your implementation gaps across the 4 themes and 93 controls, with focus on the 11 new 2022 controls including threat intelligence, cloud security, data masking, and secure coding.

Assess your readiness for the UK government's Cyber Essentials certification. Covers all five technical control areas: boundary firewalls, secure configuration, access control, malware protection, and patch management.

Assess your readiness for Cyber Essentials Plus — the independently verified version of CE. Covers the same five control areas but with an assessor conducting external vulnerability scans and internal authenticated configuration testing.

Assess your readiness for an AICPA SOC for Cybersecurity examination. Understand your cybersecurity risk management programme gaps before engaging a CPA for a formal examination.

Assess your HIPAA Security Rule compliance readiness. Identify administrative, physical, and technical safeguard gaps before your next OCR audit or business associate review.

Assess your HITRUST CSF certification readiness. Understand your information protection program gaps across the HITRUST Control Categories before beginning a formal assessment.

Assess your organisation's GDPR compliance posture. Understand your data governance gaps, lawful basis documentation, and data subject rights readiness.

Assess your CCPA/CPRA compliance readiness. Understand your consumer rights fulfilment, data inventory, and privacy notice gaps before a California AG enforcement action.

Assess your ISO 27701 certification readiness. Understand your Privacy Information Management System (PIMS) gaps and privacy control maturity before engaging a certification body.

Assess your LGPD compliance readiness for Brazil's General Data Protection Law. Understand your legal basis, data subject rights, breach notification, and international transfer gaps.

Assess your PIPEDA compliance readiness. Understand your accountability, consent, individual rights, and security safeguard gaps against Canada's federal private-sector privacy law.

Assess your COPPA compliance readiness. Understand your privacy notice, verifiable parental consent, data minimisation, and third-party disclosure gaps for protecting children under 13.

Assess your compliance with the FBI CJIS Security Policy. Understand your posture across all 13 Policy Areas before your next CJIS audit or agency review.

Assess your CMMC 2.0 readiness for DoD contract eligibility. Understand your CUI protection gaps across the 14 NIST SP 800-171 domains before your C3PAO assessment.

Assess your FedRAMP authorization readiness. Understand your security control gaps and ATO documentation requirements before engaging a 3PAO or pursuing a JAB P-ATO.

Assess your ITAR export compliance readiness. Understand your registration, licensing, and Technology Control Plan gaps before a DDTC audit or voluntary self-disclosure.

Assess your FISMA compliance readiness. Understand your FIPS 199 categorization, SSP documentation, NIST 800-53 control implementation, ATO status, and continuous monitoring gaps.

Assess your agency's compliance with NLETS Information Access Security (IAS) requirements. Covers personnel security, physical and logical access controls, audit logging, training, incident response, and data dissemination policies.

Assess your cybersecurity program maturity against the NIST Cybersecurity Framework 2.0. Understand gaps across all six core functions — Govern, Identify, Protect, Detect, Respond, and Recover.

Assess your NIST SP 800-171 compliance readiness for protecting Controlled Unclassified Information. Understand your CUI protection gaps across all 14 control families before a CMMC assessment.

Assess your NIST SP 800-53 Rev 5 compliance readiness. Understand your security and privacy control gaps across all 20 control families for federal systems and information.

Assess your PCI DSS v4.0 compliance readiness. Understand your cardholder data environment gaps across the 12 PCI DSS requirements before your next QSA assessment.

Assess your GLBA Safeguards Rule compliance readiness. Understand your information security programme gaps and FTC requirements for protecting customer financial information.

Assess your SOX ICFR readiness. Understand your internal controls over financial reporting gaps, IT General Controls posture, and CEO/CFO certification preparation before your next audit cycle.

Assess your DORA compliance readiness. Understand your ICT risk management, incident reporting, and third-party risk gaps across all five DORA pillars before supervisory review.

Assess your NERC CIP compliance readiness. Understand your BES cyber system protection gaps across all CIP standards before your next NERC or Regional Entity audit.

Assess your NIS2 compliance readiness. Understand your governance, risk management, incident reporting, and supply chain security gaps against the EU Network and Information Systems Directive 2 requirements.

Assess your TISAX readiness for automotive sector information security. Understand your VDA ISA compliance gaps, prototype protection posture, and assessment preparation status.