Measure your cybersecurity maturity and ISO 27001 readiness.

ISO 27001 clauses 4, 5 and 6

Information security roles, responsibilities and leadership commitment are clearly defined.

ISO 27001 clause 6.1

Security risks are identified, assessed, treated and reviewed on a regular basis.

ISO 27001 Annex A organizational controls

Security policies and procedures are documented, approved and communicated to relevant teams.

ISO 27001 Annex A asset and information controls

Critical assets, owners, data types and business applications are inventoried and classified.

ISO 27001 Annex A access controls

Access rights are granted, reviewed and removed according to business need and least privilege.

ISO 27001 Annex A authentication controls

Multi-factor authentication is enforced for privileged, remote and sensitive access.

ISO 27001 clause 7 and Annex A people controls

Employees receive security awareness training and phishing guidance at least annually.

ISO 27001 Annex A technology controls

Vulnerabilities are tracked, prioritized and remediated through a defined patch process.

ISO 27001 Annex A logging and monitoring controls

Security logs are collected, protected and reviewed for suspicious activity.

ISO 27001 Annex A incident management controls

Incident response roles, escalation paths and playbooks are documented and tested.

ISO 27001 Annex A business continuity controls

Backups, recovery objectives and crisis procedures are tested against realistic scenarios.

ISO 27001 clauses 9 and 10

Security performance, audits, corrective actions and improvement plans are regularly reviewed.