Skip to main content

    Free self-check

    Framework self-check

    Answer ten questions about a framework. See the possible gaps your answers suggest.

    An external AI service drafts the questions and summary. It does not verify controls or provide an audit conclusion. Sessions are stored so you can resume by email link.

    a readiness gap register beside a bundle of sampled control-testing evidence.

    Choose your framework.

    • ISO/IEC 27001:2022

      Information security management system readiness

      Ten questions on information security management system (ISMS) scope, leadership, risk assessment, Annex A control themes, internal audit and management review.

      Start free self-check
      Need a professional review?

      A gap assessment or internal audit against clauses 4–10 and the Annex A controls in your Statement of Applicability. Certification is issued by an accredited certification body, not by AuditPartners.

      Talk to us

    • ISO/IEC 42001:2023

      AI management system readiness

      Ten questions on AI inventory, leadership and roles, AI risk and impact assessment, lifecycle controls and monitoring.

      Start free self-check
      Need a professional review?

      A gap assessment or internal audit against clauses 4–10 and the Annex A AI controls relevant to your systems, including how AI systems are inventoried, assessed and monitored. Certification is issued by an accredited certification body.

      Talk to us

    • SOC 2 Readiness

      Readiness against the Trust Services Criteria

      Ten questions on governance, logical access, change management, monitoring and vendor oversight themes from the Trust Services Criteria.

      Start free self-check
      Need a professional review?

      A readiness assessment against the Trust Services Criteria relevant to your service, with evidence gaps identified before the examination. The SOC 2 examination and report are performed by an independent CPA firm.

      Talk to us

    • NIST CSF 2.0

      Voluntary cybersecurity framework

      Ten questions across the six CSF 2.0 functions: Govern, Identify, Protect, Detect, Respond and Recover.

      Start free self-check
      Need a professional review?

      A gap assessment comparing your current and target profiles across the CSF 2.0 functions and categories you choose, with prioritized recommendations.

      Talk to us

    • HIPAA

      For covered entities and business associates

      Ten questions on administrative, physical and technical safeguard themes and breach-notification preparedness. Nothing is uploaded.

      Start free self-check
      Need a professional review?

      A Security Rule assessment of the safeguards in your environment. A business associate agreement must be in place before any protected health information is handled.

      Talk to us

    • CMMC Level 1

      For FCI handling where the contract specifies Level 1

      Ten questions on the Level 1 practice areas for Federal Contract Information.

      Start free self-check
      Need a professional review?

      A readiness review of the 15 Level 1 requirements to support your organization's own annual self-assessment and affirmation.

      Talk to us

    • CMMC Level 2

      For CUI handling where the contract specifies Level 2

      Ten questions on systems handling CUI, access control, SSP and POA&M status, incident response and your current SPRS self-assessment position.

      Start free self-check
      Need a professional review?

      A gap assessment against the NIST SP 800-171 Rev. 2 practices in your boundary. Whether a self-assessment or a C3PAO assessment applies follows the contract and current program rules.

      Talk to us

    • FedRAMP

      Federal cloud authorization preparation

      Ten self-reported questions on authorization boundary, SSP and POA&M documentation, access, monitoring and incident response.

      Start free self-check
      Need a professional review?

      A NIST SP 800-53 gap assessment for the selected controls. Official FedRAMP readiness assessments are performed by a recognized 3PAO.

      Talk to us

    • GovRAMP (formerly StateRAMP)

      State and local government cloud authorization preparation

      Ten questions on boundary, documentation, access, monitoring and incident response for cloud services sold to state and local government.

      Start free self-check
      Need a professional review?

      A NIST SP 800-53 gap assessment to help prepare for the distinct GovRAMP authorization process.

      Talk to us

    Before you begin.

    • Use your own answers

      The summary uses your answers, not inspected records. Nothing is uploaded.

    • Keep confidential information out

      Do not enter client records, passwords or other people's personal information. See the Privacy Policy for processing and retention details.

    • Use it to prepare questions

      A possible gap can be a useful starting point for a professional assessment. It is not a compliance score or certificate.

    • Need someone to examine the records?

      Explore the reviews available for your organization.

      Compliance assessments and internal audits

    Frequently Asked Questions

    What the self-check covers and how it uses your information.

    Current program sources: DoD CIO — About CMMC · HHS — HIPAA Security Rule.

    About the self-check

    What is a compliance gap assessment?
    A professional gap assessment compares your practices and records with framework requirements and recommends what to address. This free tool suggests possible gaps from your answers. It does not verify controls or establish compliance.
    How is the free self-check different from a professional assessment?
    The self-check uses an external AI service to draft questions and a summary from your answers. A professional assessment reviews records and may test controls; its report distinguishes design, implementation, operating effectiveness and missing evidence.
    How long does the assessment take?
    The free self-check asks ten questions and takes about ten minutes. A professional assessment's schedule depends on the systems, records, interviews and testing needed.
    Is this a real audit? Will I receive an official certification?
    No. This self-check is not an audit or certification. AuditPartners provides SOC 2 readiness assessment against the Trust Services Criteria; the SOC 2 examination and report are performed by an independent CPA firm. ISO certification is performed by an accredited certification body. FedRAMP and CMMC have separate assessment and authorization requirements.
    Who conducts these assessments?
    An external AI service generates the free self-check's replies. For professional assessments, AuditPartners professionals review exceptions and prepare findings and conclusions from the evidence examined and controls tested.
    Can I upload documents?
    No. The free self-assessment is a question-and-answer conversation; it has no document upload. Do not paste confidential evidence, credentials or personal data of others into the chat. For document review, contact us to discuss a professional engagement and confidentiality terms.