Cyber Readiness Benchmark — Essential Eight & NIST CSF

What you'll get

Work through a single set of plain-language questions — about 7 minutes. Answer for how things actually work today, not how they're documented to work. At the end you'll receive three views:

💼

Executive risk dashboard

Your control gaps converted into dollar exposure, investment required, and risk-adjusted return — ready to take to the board.

🛡️

Essential Eight maturity

Maturity Level 0–3 for each of the eight strategies, with your weakest-link overall posture.

🎯

NIST CSF 2.0 profile

Coverage across all six functions: Govern, Identify, Protect, Detect, Respond and Recover.

In a hurry, or showing someone? The example report fills in a sample organisation's answers and jumps straight to the results.

Confidential — for internal use

Your readiness benchmark

Generated locally in your browser. Nothing was transmitted or stored.

Executive risk dashboard

Annual risk exposure today

—

Estimated loss exposure from current control gaps

Investment to reach target

—

Indicative spend to close all gaps to target maturity

Risk-adjusted return

—

Exposure removed per dollar invested

Board summary

—

How these figures are derived

Every number on this dashboard is traceable. Here is exactly how the model turns your answers and organisation profile into dollars — so you can defend it to the board.

Where the dollars should go

Each numbered control is plotted by the investment to fix it (horizontal) against the annual risk exposure that fixing it removes (vertical). The numbers match the priority table below. The quadrant a control falls in tells you how to treat it.

Essential Eight control NIST CSF control ● Bubble size = strategy criticality

Priority investments

Ranked by risk-adjusted return — where the next security dollar works hardest. Numbers match the chart above.

#	Control	Current → target	Risk exposure removed	Investment	Return

Figures are indicative, scaled to the profile you entered, and intended to support board-level prioritisation — not actuarial loss estimates.

Cyber Readiness
Benchmark

What you'll get

Executive risk dashboard

Essential Eight maturity

NIST CSF 2.0 profile

Set the financial context

Your readiness benchmark

Executive risk dashboard

How these figures are derived

Where the dollars should go

Priority investments

Essential Eight maturity

Maturity by strategy

Future-readiness by domain

NIST CSF 2.0 profile

Coverage by function

Remediation roadmap