Is your company ready?
Choose the framework your customers, regulators or contracts expect. Each assessment takes about six or seven minutes, gives you an instant score and a prioritized list of what to fix, and never sends your answers anywhere unless you choose to.
Which one fits you?
Filter by the kind of organization you are, then pick an assessment.
Cybersecurity Framework readiness
Any organizationSee where your program stands across all six CSF 2.0 functions, and get a prioritized list of what to fix first.
SOC 2 readiness
SaaS & service providersFind out which Trust Services Criteria need work and whether you're ready for a Type 1 or Type 2 report.
HITRUST readiness
Healthcare & health techGauge readiness across the 19 HITRUST domains and see which assessment (e1, i1 or r2) fits you.
HIPAA readiness
Healthcare & business associatesCheck administrative, physical and technical safeguards, and how ready you are for the proposed update.
CMMC readiness
Defense contractorsCheck Level 1 or Level 2 readiness across NIST SP 800-171 families, plus SPRS and contract obligations.
FedRAMP readiness
Cloud providers selling to governmentCheck readiness under the 2026 Consolidated Rules and FedRAMP 20x, and see the deadlines that apply.
FISMA readiness
Federal agencies & contractorsRate your program the way Inspectors General do: ten metric domains on the five-level maturity model.
NIST CSF 2.0 works for any organization and maps to many other frameworks, so it's a strong first check. Or tell us about your customers and contracts and we'll recommend the right one.
Go deeper with a free membership
Criterion-level assessments for organizations preparing for an audit. Create a free account or sign in.
SOC 2 Type 2
Every Trust Services Criterion with Type 2 evidence questions.
ISO/IEC 27001:2022
Mandatory clauses 4–10 and key Annex A controls.
HITRUST e1 · i1 · r2
Readiness across all 19 domains for your target assessment.
How it works
- Pick a frameworkChoose the one your customers, contracts or regulators require.
- Answer honestlyRate each statement as things work today. "Not sure" is fine.
- Get your scoreSee readiness by area and your top priorities instantly.
- Take the next stepSave a PDF, or book a free results debrief with us.
Not sure which framework applies?
Tell us about your customers and contracts, and we'll point you to the right starting point.
Self-assessments for readiness planning only; they are not audits, certifications or attestations. Illustrations are original artwork and not the logos of NIST, the AICPA, HITRUST, HHS, the Department of Defense, GSA or ISO.
Strat Cyber
Need cybersecurity support? Share your project details. We're here to safeguard your digital assets.
Join free to unlock in-depth readiness assessments, executive and vendor toolkits, advisories and the briefing archive.