ABZSECURE / ASSESSMENT STUDIO
A useful first view of your security and compliance readiness. Choose a focus, review your practices, and leave with a clear evidence-gathering plan.
Security baseline, buyer assurance,
an ISMS, or responsible AI use.
Selected states, unreviewed areas
and unvalidated exclusions.
A next action and suggested owner.
A starting point—not a verdict.
01 / FIND YOUR STARTING POINT
Four original preliminary checks, plus the existing NIST CSF 2.0 snapshot. These are different tools for different questions—not comparable compliance scores.
A guide based only on your stated goal—not a legal, contractual or regulatory applicability decision.
Explore Govern, Identify, Protect, Detect, Respond and Recover in the dedicated category-level tool.
02 / YOUR PRIVATE SELF-CHECK
Selections remain in this page’s memory unless you choose to email a report. No account, file upload, scan, cloud connection or background answer storage.
No automatic save. Download a local report before closing or reloading this page.
03 / YOUR NEXT-STEP REPORT
Suggested actions based on your declared states—not a validated risk ranking.
| Question | Your declared state |
|---|
OPTIONAL / AFTER YOUR RESULTS
You already have the full result. Emailing submits your address, optional organization, selected track, declared states and attribution to ABZSECURE’s report service. An operational copy follows the configured reporting route. See provider and routing details.
No newsletter subscription. No evidence files or sensitive incident details.
Build a current-to-target readiness programme with evidence requests, owners and review dates, or explore authorization and plan an authorized pentest. These tools remain local and do not inherit your answers automatically.
FROM A SELF-CHECK TO HUMAN JUDGMENT
The public tools help you ask better questions. A paid engagement reviews agreed evidence and turns it into a decision you can explain.
One agreed business or buyer requirement, a defined scope, selected evidence questions and a written next-step plan.
Discuss a diagnostic ↗An agreed requirement set and evidence boundary. Reviewed gaps, named owners, priorities and a management handover.
Scope the work ↗A capped, scheduled review of agreed evidence and actions. Scope, cadence, support hours and responsibilities are agreed—not assumed.
Discuss ongoing review ↗Fees follow a written scope. Certification, independent attestation, legal advice and automatic provider monitoring are not included. The private GRC Workspace supports approved consultant delivery; this public tool does not expose it or onboard customer evidence.
BEFORE YOU BEGIN
No. The four new tracks each contain 12 original discussion prompts. They do not reproduce a licensed standard or cover every requirement. The dedicated NIST snapshot summarizes 22 categories; it is not a complete CSF Organizational Profile. A formal assessment needs an agreed scope, applicable requirements and evidence review.
Numeric states range from zero to three. The index is their sum divided by the number of rated prompts times three, expressed as a percentage. Unreviewed prompts and self-declared exclusions are not scored as passes. If none are rated, no index is shown. Coverage and unresolved items remain visible. It is not a compliance percentage, maturity tier or a valid comparison between different tracks.
The application keeps your working selections in page memory. It does not automatically save them to browser storage or send them to the reporting endpoint. Normal hosting requests still occur. JSON and print exports are initiated by you. Only requesting an emailed report submits the report data described at that form. Do not use this tool to hold confidential evidence.
No endorsement or partnership is claimed. NIST, ISO and AICPA materials and names belong to their respective sources. Our original readiness prompts are a preliminary educational aid, not their approved audit questionnaire or certification programme.