Know what to fix first, and why.
CISOiq assesses your security program through a guided conversation and turns it into a prioritized roadmap.
The assessment is currently available in Spanish.
Exhibit 1
Initiatives by domain and horizon, with their dependencies
Drag or tap an initiative to reassign its horizon
Your board wants a plan. Your tools give you alerts.
You face the same regulatory demands as a large enterprise, without its team. You run dozens of tools and still don't have a priority order you can defend.
Board-defensible plan
What to resolve first, what can wait, and why.
You finish with three deliverables you can use right away.
Exhibit 2 · Deliverables
Domain assessment
Where your program stands across six domains, and what still needs confirming.
Horizon roadmap
Initiatives sequenced across three horizons by risk and dependencies.
Downloadable package
Your strategy, ready for your AI assistant: ChatGPT, Claude, or Gemini.
One conversation, one review, one plan.
Answer a guided conversation at your own pace. Review what CISOiq understood before your plan is generated. Get your roadmap and download it.
Guided conversation
Answer structured questions across six cybersecurity domains at your own pace, without infinite questionnaires or empty jargon.
Review and confirmation
CISOiq summarizes its understanding of your program; you confirm or refine the findings before your strategy is computed.
Roadmap and export package
Receive your plan structured across three horizons with clear dependencies, and export the structured package for your AI.
The methodology measures 34 signals instead of hundreds of questions.
A proprietary methodology, focused on what predicts program maturity.
Exhibit 3 · Signals by domain
Governance, risk, and assurance
Security architecture and engineering
Identity and access control
Security operations
Data and artificial intelligence
Program and operating model
Source: CISOiq methodology.
| Domain | Signals |
|---|---|
| Governance, risk, and assurance | 6 |
| Security architecture and engineering | 6 |
| Identity and access control | 5 |
| Security operations | 7 |
| Data and artificial intelligence | 5 |
| Program and operating model | 5 |
| Total | 34 |
Start today if you lead security at your company.
For your organization
Available nowIf you lead security at your company.
For vCISOs and consultancies
In preparationWe're building a plan for teams that serve multiple clients.
Multi-client oversight and aggregated reporting in active design.
One plan: $29 a month.
You create your account and subscribe from the app when you start the assessment. For now, payments run in Stripe test mode: no real charges are made.
Exhibit 4
Monthly plan
| Plan | What's included | Price |
|---|---|---|
| Monthly | Assessment, horizon roadmap, and downloadable package | $29 a month |
What people ask before they start.
How long does an assessment take?
About an hour, depending on how detailed your answers are.
Which languages are available?
The site is in English and Spanish. The assessment is currently available in Spanish only.
Know what to fix first, and why.
$29 a month · payments in test mode
Start your assessment