Self-assessment

What is our objective?

Our Cybersecurity Maturity Self-Assessment Form has a dual purpose. On the one hand, we want to increase the level of awareness and consciousness of organizations by allowing them to identify their potential gaps, their needs, and their level of protection compared to similar organizations.

On the other hand, by identifying your organization's potential gaps and needs, this form allows us to share with you concrete, practical and targeted recommendations and mitigation measures that will allow you to immediately strengthen your organization's protection against the dangers that threaten it.

What is our approach?

Our Cybersecurity Maturity Self-Assessment Form focuses on an organization's Internet-connected infrastructure and core services. This approach allows us to simplify a certain number of conditions in this first assessment phase in order to adapt to the maximum number of organization typologies.

With this in mind, and with the objective of addressing all types of organizations, we have also chosen to exclude from this questionnaire the aspects related to the internal development of applications.

What is our method?

The cybersecurity self-assessment tool is based on a selection of the elements of the NIST Cybersecurity Framework and its 5 functions, but also links to ISO 27002, IEC 62443, ISO 27103 and the CIS Critical Security Controls. The tool helps you assess your maturity regarding cybersecurity and, through practical recommendations, empowers you to improve in it.

How do we calculate your score ?

Your score is calculated based on the answers you provide for each question.

At the end of each section, the sum of the points of all the questions in the section is calculated to determine a maturity level and potential impacts in case of gaps.

The maturity levels range from 1 to 5 and can be summarized as follows:

Learn more

Level 1: Basic Cyber-hygiene

Some cybersecurity processes are performed, and measures implemented at least in an ad-hoc manner.

Level 2: Intermediate Cyber-hygiene

Cybersecurity practices and policies to guide implementation of cybersecurity efforts are established and documented.

Level 3: Good Cyber-hygiene

Cybersecurity measures are established, maintained, resourced and a plan of action is in place for their management.

Level 4: Proactive Cyber-hygiene

The effectiveness of the cybersecurity measures is reviewed and measured.

Level 5: Advanced/Progressive Cyber-hygiene

Cybersecurity measures are standardized and optimized across all organizational units.

How to answer the questions?

In order to get the most accurate assessment of your maturity level, it is important to answer this questionnaire honestly and transparently.

For each question, ask yourself which answer best fits your current situation and whether all of the items apply to your situation. If any of the items in the proposed answer are not applied in your organization, you should do not apply to your organization's situation then select the answer from the previous level.

Time needed to complete the form

Completing the form only takes about fifteen minutes, and your results are available immediately.

Access the questionnaire

NIS2, Are you on scope?

Are your accounts well protected?