CIS Controls Assessment
Evaluate your organization against representative CIS Controls IG1 safeguard categories. No account access required.
Free to use · no account required
CIS Controls Assessment
Work through each section at your own pace. Results are shown immediately — no email required.
Compliance & Governance Tool
CIS Controls Assessment
Work through representative CIS Controls IG1 safeguard categories — asset inventory, secure configuration, access control, malware defenses, data recovery, security awareness, and incident response — to evaluate your baseline posture.
How It Works
What this tool does with your input
How this tool works, and what happens to what you enter
- You
You answer scoped questions
Short, concrete questions about how your environment is actually configured — not a quiz.
- The tool
Scoring runs in your browser
Your answers are evaluated locally against a published baseline — no tenant access, no agent, no connection to your systems.
- You
You get a prioritised gap list
Where you stand by area, with the sequence to address it.
FAQ
Common Questions
What are the CIS Controls, and why do they matter for cyber insurance?
The CIS Controls are a prioritized set of cybersecurity best practices. IG1, the foundational implementation group, closely resembles the baseline control set most cyber insurance carriers now expect applicants to attest to.
Does this cover all 18 CIS Controls?
This tool evaluates representative safeguard categories from the highest-impact controls rather than every safeguard across all 18 controls. It is a directional starting point, not a complete certified assessment.
Is anything I enter here saved or transmitted?
No. Your answers are processed in your browser to generate the results shown on this page and are not stored or transmitted unless you separately choose to request an emailed copy.
Related Compliance Guidance
Operational Support
Need help closing your CIS Controls gaps?
IT KORR can help you implement and document the baseline controls insurers and auditors expect to see in place.
No commitment required — we respond within one business day.