No account needed. Answer the questions, pay securely, and receive your deliverable.
Name shown on the deliverable
Shown on the deliverable.
Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.
Deliverable
You set its title, author and structure.
As it will appear on the result.
Shown as the author of the deliverable; never filled in by the AI.
What is assessed
The requirements to compare yourself with, and why.
The laws and standards to assess against. Each one selected brings its requirements.
Why the assessment is run (e.g. prepare a customer audit, check NIS2 readiness).
Entities, sites, processes or systems assessed.
Internal rules, contractual clauses or requirements of another standard, one row each, with their state if you know it.
When the gaps must be closed: each action's date falls at least two weeks before. If left empty: 45 days for a high priority, 120 for a medium one.
Current state
What you already know. Anything left unstated is reported as not assessed, never as met.
Choose a framework above: its requirements appear here.
A selected control assessment or compliance questionnaire is read automatically; a state chosen here takes precedence. ISO/IEC 27001: the key Annex A controls are always assessed, the others once you state them.
Owners and context
Who owns the actions, and anything else to take into account.
Who is responsible for which area. Owners in the result are taken from here; where no role covers an area, the owner is left for you to fill.
Anything the service should take into account.
What the AI provider receives
Your answers, to write this deliverable.
Replaced first, then put back in your deliverable: Email addresses, People's names, Company names.