Follow six guided steps, connect business processes to systems and evidence, and create professional assessment documents and portfolio records. Your work saves in your browser.
01 / PRACTICAL SYSTEMIAM Governance & Access Review Hub
Review who has access, why they need it, who approved it and how it will be removed.
Open IAM governance02 / PRACTICAL SYSTEMVulnerability & Remediation Management Hub
Turn vulnerability findings into a business-prioritised remediation queue and verify the fixes.
Open Vulnerability management03 / PRACTICAL SYSTEMThird-Party & Supplier Risk Hub
Assess supplier security and the effect of supplier failure, compromise or loss of access on your business.
Open Supplier risk04 / PRACTICAL SYSTEMSecurity Audit & Compliance Evidence Hub
Plan an evidence-based audit, test selected controls and track findings to verified closure.
Open Audit & compliance05 / PRACTICAL SYSTEMData Governance & Privacy Protection Hub
Map information handling and assess whether collection, access, sharing, retention and disposal are justified and protected.
Open Data & privacy06 / PRACTICAL SYSTEMCloud Security & Configuration Review Hub
Assess cloud configuration evidence, allocate customer/provider responsibilities and plan verified improvements.
Open Cloud security07 / PRACTICAL SYSTEMIncident Response & Crisis Coordination Hub
Coordinate incident decisions, preserve evidence and communicate business impact while linking recovery objectives.
Open Incident response08 / PRACTICAL SYSTEMSOC Detection Engineering & Monitoring Hub
Assess log coverage, design detection logic and test it against a transparent synthetic event replay.
Open SOC & detection09 / PRACTICAL SYSTEMSecure Application & API Review Hub
Turn application threats into security requirements, verification criteria and an evidence-based release recommendation.
Open Application & API security10 / PRACTICAL SYSTEMZero Trust Implementation Planner
Build a phased plan across identity, devices, networks, applications and data, with evidence-based acceptance criteria.
Open Zero Trust planning11 / PRACTICAL SYSTEMCyber Risk & Investment Decision Hub
Explain business exposure and compare an investment with transparent assumptions, cost ranges and residual uncertainty.
Open Risk & investment12 / PRACTICAL SYSTEMCyber Asset & Dependency Management Hub
Reconcile system inventories, identify unsupported or unmanaged assets and connect ownership to critical business services.
Open Assets & dependencies