Assess
Rate 18 plain-language practices across Govern, Identify, Protect, Detect, Respond and Recover.
A focused, 18-question readiness check built around the six functions of NIST CSF 2.0. Understand your priorities. Communicate risk. Plan what comes next.
01 / THE APPROACH
Built for resource-constrained teams that need a defensible starting point, not another hundreds-page checklist.
Rate 18 plain-language practices across Govern, Identify, Protect, Detect, Respond and Recover.
See six normalized function scores, a descriptive overall band and the gaps that deserve attention.
Get three concrete next-step recommendations and print the result for an improvement discussion.
02 / READINESS ASSESSMENT
Choose one response per statement. Use your current practice—not your planned target—as the baseline.
Answers are sent to the scoring API in memory and are not saved to a database by this demonstration.
03 / YOUR READINESS SNAPSHOT
This is an indicative self-assessment, not an audit or claim of conformity.
Equal-weighted average of six NIST CSF 2.0-inspired function scores.
Sorted by your lowest-scoring functions.
Results are calculated from self-reported inputs, are not independently validated and do not establish compliance or certification.
04 / OPEN METHODOLOGY
Transparent, intentionally bounded scoring that supports decisions rather than pretending to measure the full cyber risk landscape.
NIST CSF 2.0 and its Small Business Quick-Start Guide shape the six-function model. CISA CPGs inform pragmatic improvement actions.
Each function has three items rated from 0 to 4. Function score = total / 12 × 100. The overall score is the mean of six rounded function scores.
Initial: 0–39; Developing: 40–59; Defined: 60–79; Adaptive: 80–100. These project-specific labels are not official NIST tiers.