IKNSA

Guided assessment

Choose the assessment that fits your situation.

Governance, applications, cloud, data, cybersecurity, resilience or regulation: identify your priorities and the areas to explore further.

Choose an assessment

Start with the issue that matters to you.

Select a domain, then answer the questions at your own pace. You receive an initial view of your situation and the priorities to explore further. Do not enter sensitive data in your answers.

22 assessments available

IS 360°Leadership & transformation

Global information system audit

Strategy, estate, operations, budget and risks: the entry point for a leadership team that wants to know where to act.

  • 8 min
  • 4 steps
  • Score + priorities
GovernanceLeadership & transformation

IT governance & operating model

Mandates, arbitration, architecture, sourcing, committees and the performance of the decision set-up.

  • 7 min
  • 4 steps
  • Governance maturity
ApplicationsLeadership & transformation

Application portfolio & technical debt

Inventory, criticality, obsolescence, maintainability, dependencies and modernisation trajectory.

  • 7 min
  • 4 steps
  • Portfolio priorities
ERP · CRMLeadership & transformation

ERP, CRM & business software readiness

Target processes, standard selection, data, interfaces, migration, adoption and cut-over conditions.

  • 7 min
  • 4 steps
  • Project readiness
DataLeadership & transformation

Data governance, quality & platform

Ownership, quality, reference data, traceability, BI usage and preparing AI use cases.

  • 7 min
  • 4 steps
  • Data maturity
CloudLeadership & transformation

Cloud, FinOps & digital sovereignty

Workload placement, cloud foundations, legal control, costs, dependencies and reversibility.

  • 7 min
  • 4 steps
  • Cloud trajectory
CyberCyber & resilience

Cybersecurity maturity

Risk governance, protection, detection, response and continuous improvement capability.

  • 7 min
  • 4 steps
  • Cyber posture
BreachCyber & resilience

Ransomware & breach readiness

Exposure, propagation, backups, crisis, evidence preservation and rebuilding trust.

  • 6 min
  • 4 steps
  • Response capability
BCP · DRPCyber & resilience

BCP, DRP & operational resilience

Business impacts, dependencies, continuity strategies, backups, recovery and exercises.

  • 7 min
  • 4 steps
  • Resilience maturity
IAM · ADCyber & resilience

Identities, IAM & Active Directory

Lifecycle, privileges, strong authentication, entitlements, monitoring and recovery.

  • 7 min
  • 4 steps
  • Identity control
Third partiesCyber & resilience

Vendor & outsourcing risk

Criticality, due diligence, contracts, steering, concentration and provider reversibility.

  • 7 min
  • 4 steps
  • Third-party risk
DevSecOpsCyber & resilience

DevSecOps & software chain

Secure design, code, dependencies, CI/CD, secrets, vulnerabilities and product response.

  • 7 min
  • 4 steps
  • Delivery maturity
GDPRCompliance & standards

Data protection

Governance, processing, rights, processors, transfers, risks and breaches.

  • 7 min
  • 5 steps
  • GDPR maturity
HDSCompliance & standards

Health data hosting

Scope qualification, roles, certification, architecture, operations and continuity.

  • 5 min
  • 4 steps
  • Scope + maturity
NIS2Compliance & standards

NIS2 applicability & readiness

Entity, sector, size, governance, suppliers, incidents and audit needs.

  • 6 min
  • 5 steps
  • Applicability + audit
AI ActCompliance & standards

AI Act & AI governance

Inventory, the organisation's role, risk classification, suppliers, transparency and monitoring.

  • 8 min
  • 4 steps
  • Scope + roadmap
DORACompliance & standards

Financial digital resilience

Applicability, ICT risk framework, incidents, testing, third-party register, contracts and exit.

  • 8 min
  • 4 steps
  • Scope + gaps
CRACompliance & standards

Cyber Resilience Act

Digital products, economic role, security by design, vulnerabilities and product conformity.

  • 8 min
  • 4 steps
  • Scope + readiness
ISO 27001Compliance & standards

ISO/IEC 27001 preparation

ISMS scope, risks, treatment, controls, internal audits and improvement.

  • 8 min
  • 4 steps
  • ISMS readiness
PCI DSSCompliance & standards

Card data & payments

Scope, segmentation, protection, access, monitoring, testing and validation mode.

  • 7 min
  • 4 steps
  • Scope + control
RGAACompliance & standards

Digital accessibility

Applicability, governance, procurement, design, manual testing, audit and publication.

  • 7 min
  • 4 steps
  • Accessibility readiness
TISAXCompliance & standards

Automotive information security

Client requirement, sites, objectives, sensitive information, prototypes and assessment preparation.

  • 7 min
  • 4 steps
  • Scope + preparation
A relevant journeyQuestions are matched to the domain you selected.
An immediate summaryThe findings and priorities are displayed at the end of the journey.
Protected answersAnswers that are not submitted are deleted when the session expires.