Enterprise self assessment · 25 questions · about 8 minutes

    Insider Risk & Insider Threat Assessment

    Score your organization’s insider risk posture across five pillars, see where you stand, and get a prioritized action plan. It runs entirely in your browser, and nothing is sent anywhere.

    This tool evaluates the same areas a mature security program is judged on: detection, prevention, response, access governance, and resilience to human risk. It turns your answers into a single Insider Risk Index, a maturity level, and a ranked list of what to fix first.

    01
    Tell us your industry
    Takes under a minute. It is used only to frame your results and is never sent anywhere.
    02
    Answer 25 questions
    Five pillars, five questions each. Pick the option that best matches reality today, not the goal.
    03
    Get your index & plan
    Instant score, pillar breakdown, a directional benchmark, and prioritized next steps.

    Nothing you enter leaves this page. There is no server, tracking pixel, or form submission involved. Your progress is saved only in this browser so you can pick up where you left off.

    A little context first

    This is not shared with anyone. It just lets us frame your results and, if you choose an industry, show a directional peer comparison.

    Used only for the benchmark comparison on your results.
    Helps calibrate how we phrase your action plan. A 40 person startup and a 40,000 person bank get different advice.
    Question 1 of 25 4%
    Visibility & Monitoring

    Question text goes here

    Level

    Summary goes here.

    Pillar breakdown

    Prioritized action plan

    Ranked by impact: the pillars below combine a heavier scoring weight with more room to improve.

    This is a self assessment for orientation and internal planning purposes. It approximates the domains covered by frameworks such as NIST CSF and common insider threat program guidance, but it is not a certification, audit, or substitute for a qualified risk assessment.

    Insider Risk Assessment · runs entirely in your browser · no data is transmitted or stored outside this device