Security Readiness Check
Which security rulesapply to your business?
Three questions about your industry and your customers show in a minute which frameworks likely matter for you. In a second step you can see how well your IT is prepared. You do not need to leave any contact details.
Question 1 / 3
Which of these describes your business best?
Choose the area in which you provide your services, not your internal IT.
FAQ
Frequently asked questions
How reliable is the Security Readiness Check?
It gives you a first orientation based on your industry and your customers. Whether a rule applies depends on details, such as the services you offer and the data you handle. We review those details with you in a first call. The check is not legal advice.
What happens to my answers?
Nothing. The check runs entirely in your browser. Your answers are not stored and not sent to us.
Which frameworks does the check cover?
HIPAA for health care, the FTC Safeguards Rule for non-bank financial institutions, CMMC for defense suppliers, FDA 21 CFR Part 11 for pharma, biotech and medical devices, and SOC 2 for service providers whose customers ask for a report. The NIST Cybersecurity Framework is shown to everyone as a baseline.
Why does the NIST Cybersecurity Framework appear for everyone?
It is a voluntary framework that works for companies of any size and industry. Many other rules ask for similar measures, so it is a good basis even if no specific regulation applies to you.
What should I do if several frameworks apply?
Start with the measures they share, such as MFA, encryption, access control, a tested backup and an incident response plan. A security assessment shows where you stand and puts the remaining steps in order of risk.