Skip to main content
IT Risk Management, Cybersecurity, and Compliance

IT has risks.
Let's manage them.

If you're facing hard questions from clients, insurers, or auditors, it's time to build a strong security and compliance program. Want to understand where you are today?

Free · No account required~4 to 6 minutesInstant results
01Free self-assessments

See where you stand before you commit to anything.

These are the best first step for most visitors. Start with the assessment that matches your biggest question right now, then use the results to decide whether you need expert help.

AI security · Cybersecurity · Email security
Self-assessment · AI

Assess your AI governance posture.

Twelve questions across acceptable use, model risk, data protection, and agentic-AI controls. Aligned to NIST AI RMF and ISO/IEC 42001.

What you'll get
  • 12 questions
  • ~4 minutes
  • Instant Grade
  • No account required
Free · No account requiredLast updated · Q2 2026
02What to do after the results
01

Professional assessments

Operator-led reviews for audit readiness, AI risk, infrastructure, secure SDLC, and broader compliance programs.

Best when you need a report, roadmap, or outside validation

View expert assessments →
02

Managed subscriptions

Ongoing support for organizations that need a standing compliance and security program, not just a point-in-time review.

Best when you need continuous execution and oversight

Compare managed plans →
03Frameworks we support
01SOC 2
02ISO 27001
03NIST CSF 2.0
04HIPAA
05PCI-DSS
06NIST AI RMF
07ISO 42001
08CMMC
Mapped to the same advisory model used in our paid workExplore frameworks →
04Not ready yet?
The Risk Register

Stay close to the work until you're ready to take the next step.

Subscribe on Substack for practical updates on IT risk, framework changes, and the kinds of issues that usually surface before an assessment or managed engagement.

Free: Monthly | Paid: Weekly · No spam · Unsubscribe any time

About The Risk Register →
Need a fast answer?

Skip the queue and talk through the problem directly.

If you already know you need guidance, we can help you scope the right engagement quickly and tell you whether a one-time assessment or ongoing program makes more sense.