Risk Assessment Questionnaire

Find your compliance gaps in six questions.

Select your target framework, then answer honestly to get a directional gap summary.

Compliance risk questionnaire

1. Do you have written information security policies covering access control, incident response, and data handling?
2. Is access to sensitive systems reviewed and recertified at least annually?
3. Do you maintain an inventory of all systems and third parties that process regulated data?
4. Is evidence of control operation (logs, tickets, approvals) collected continuously rather than gathered just before an audit?
5. Have you completed a risk assessment specific to your target framework in the last 12 months?
6. Do you have a designated owner accountable for compliance program maturity?

Readiness for SOC 2

100/100

Audit-ready

This score is a directional self-assessment. A formal gap assessment is required before any certification or authorization process.