12 Questions · CIS Controls v8 · 3 Minutes

Score your security posture honestly.

Twelve questions grounded in the CIS Controls v8 implementation groups — the controls Verizon's DBIR consistently ranks as highest-impact. Real scoring. Per-control gap chart. Top remediation priorities. Engineer-reviewed 90-day roadmap on submit.

No fabricated benchmarks. No “congratulations, you scored 87” before you click anything. Every point in your score is traceable to an answer you gave.

Question 1 of 120 answered

CIS-6 Access Control Management

How widely is MFA enforced for your team?

Multi-factor on every email, identity, and admin account is the single highest-impact control.

How this assessment works

Step 1

Answer 12 questions

Each question maps to a CIS Controls v8 family. Pick the option that most honestly describes your current state.

Step 2

See your tier + gaps

Tier verdict (STRONG / MODERATE / WEAK / CRITICAL), per-control gap chart, and the top 5 gaps to address first. All scoring transparent from your answers.

Step 3

Get the remediation roadmap

Submit your result for an engineer-reviewed 90-day remediation roadmap. PDF inside two business days. No marketing follow-up.

Adjacent reads

IT Risk Calculator (broader) →Real website security scan →Microsoft 365 security architecture →Managed SOC service →Talk to an engineer →