Assessment Disclaimer
Please read this before relying on your results from any of our six free assessments.
What our assessments are
Our free assessments (AI Governance, Cyber Risk, CISO Readiness, Compliance Readiness, Board Readiness, and Cyber Insurance Readiness) compute a score directly and automatically from the answers you provide. Your results — your overall score, your domain-by-domain breakdown, and the findings and priorities shown to you — are generated from that same set of answers, using fixed scoring logic and pre-written guidance for each topic area.
What our assessments are not
- They are not an independent audit, a penetration test, or a certification assessment.
- They are not reviewed or verified by a human before you see your results — your score reflects your own answers, not an expert's judgment of your actual environment.
- They do not examine your systems, your code, your configurations, or any evidence beyond what you self-report by answering questions.
- They are not comprehensive — each assessment covers a fixed set of topic areas and questions, not the full scope a formal risk assessment or audit would cover.
- Completing an assessment does not create an advisory, consulting, or client relationship with us.
Accuracy depends on your own answers
Because your score is computed entirely from what you tell us, its accuracy depends entirely on the accuracy of your answers. Answering optimistically, or without full knowledge of your organization's actual practices, will produce a score that doesn't reflect your real posture.
Don't rely on this as your only input
Do not use your assessment results as the sole basis for a security, compliance, insurance, or business decision. They are a starting point for a conversation, not a substitute for a formal risk assessment conducted by a qualified professional with access to your actual systems and evidence — which is exactly what our advisory engagements provide.
No AI involved in your score
Your score, domain breakdown, and the findings you see are not generated by an AI model — they come from deterministic scoring logic and pre-written guidance content. See our AI Disclaimer for where we do use AI (internally, to assist our consultants, never to compute a visitor-facing score).
What happens to your answers
See our Privacy Policy for what we collect and how long we keep it.
Questions about your results
If you'd like a qualified professional to review your actual environment, talk to a CISO — that conversation is free, and unlike the automated assessment, involves a real person.