Skip to main content
New: Essentials: Security — security products for small teams.Learn more →
IT Risk Management, Cybersecurity, and Compliance

IT has risks.
Let's manage them.

If you're facing hard questions from clients, insurers, or auditors, it's time to build a strong security and compliance program. Want to understand where you are today?

Free · No account required~4 to 6 minutesInstant results
Free self-assessments

See where you stand before you commit to anything.

These are the best first step for most visitors. Start with the assessment that matches your biggest question right now, then use the results to decide whether you need expert help.

AI security · Cybersecurity · Email security
Self-assessment · AI

Assess your AI governance posture.

Twelve questions across acceptable use, model risk, data protection, and agentic-AI controls. Aligned to NIST AI RMF and ISO/IEC 42001.

What you'll get
  • 12 questions
  • ~4 minutes
  • Instant Grade
  • No account required
Free · No account requiredLast updated · Q2 2026
What to do after the results
1

Professional assessments

Expert-led reviews for audit readiness, AI risk, infrastructure, secure SDLC, and broader compliance programs.

Best when you need a report, roadmap, or outside validation

View expert assessments →
2

Managed subscriptions

Ongoing support for organizations that need a standing compliance and security program, not just a point-in-time review.

Best when you need continuous execution and oversight

Compare managed plans →
3

Essentials: Security

Self-serve device tooling — patch management, managed browser, EDR, and awareness training — for teams too small for a program.

Best when you just need the products

See Essentials: Security →
Frameworks we support
SOC 2
ISO 27001
NIST CSF 2.0
HIPAA
PCI-DSS
NIST AI RMF
ISO 42001
CMMC
Mapped to the same advisory model used in our paid workExplore frameworks →
Not ready yet?
The Risk RegisterSM

Stay close to the work until you're ready to take the next step.

Subscribe on Substack for practical updates on IT risk, framework changes, and the kinds of issues that usually surface before an assessment or managed engagement.

Free: Monthly | Paid: Weekly · No spam · Unsubscribe any time

About The Risk Register →
Need a fast answer?

Skip the queue and talk through the problem directly.

If you already know you need guidance, we can help you scope the right engagement quickly and tell you whether a one-time assessment or ongoing program makes more sense.