Security Compliance Hub
Optimising Your Compliance Journey
Security assessment tools to help your organisation meet regulatory compliance standards.
Compliance Readiness Assessment
One quick assessment covering CE, ISO 27001, CAF & DORA. Find your gaps and closest framework in minutes.
- 30 questions across 7 security domains
- Cross-mapped to 4 frameworks simultaneously
- Shows which framework you're closest to
- Prioritised gap analysis & roadmap
Cyber Essentials Readiness Checker
Self-assess your organisation against all five Cyber Essentials v3.3 technical controls.
- AI-powered analysis by Phronesis, your security advisor
- Radar chart, heatmap, and PDF report
- Supply chain vendor risk module
- Share results via secure link
DORA Compliance Assessment
Evaluate your organisation against the EU Digital Operational Resilience Act for financial entities.
- All 5 DORA pillars covered
- 49 questions across Articles 5–45
- Entity-specific regulatory guidance
- Phronesis AI analysis & share via secure link
NCSC CAF Assessment
Evaluate your organisation against the NCSC Cyber Assessment Framework for operators of essential services.
- All 14 CAF principles covered
- IGP alignment and gap analysis
- Attack surface discovery & breach exposure check
- Phronesis AI analysis & board-level reporting
- Share results via secure link
ISO 27001 ISMS Assessment
Evaluate your Information Security Management System against ISO 27001:2022 clauses and Annex A controls.
- 8 sections covering Clauses 4–10 & Annex A
- 58 questions mapped to ISO 27001:2022
- Phronesis AI analysis & certification readiness
- Share results via secure link
AI Governance Assessment
Assess your AI governance readiness against the EU AI Act, ISO/IEC 42001, and NIST AI RMF frameworks.
- 6 domains, 42 questions across AI governance
- EU AI Act risk classification mapping
- Phronesis AI analysis & regulatory guidance
- Share results via secure link
Unified Compliance Dashboard
GRC-style cross-framework consolidation combining CAF, DORA, ISO 27001, NIS2 and NIST CSF 2.0 coverage in a single dashboard — without the enterprise GRC price tag or an implementation project.
- NIST CSF 2.0 & NIS2 derived scoring from your existing CAF + DORA results
- Unified gap analysis across every framework you run
- Side-by-side radar charts & framework coverage bars
- Board-ready PDF export & JSON download
Connect your tools & go agentic
Turn assessment gaps into actions automatically — create tickets, send alerts, push GRC evidence, enrich assessments with real scan data, and let Phronesis call live tools mid-analysis.
Learn more →| Security Domain | Cyber Essentials | ISO 27001 | NCSC CAF | DORA | AI Governance |
|---|---|---|---|---|---|
| Access Control & Authentication | ✓ Control 4 | ✓ A.9 | ✓ B2 | ✓ Art. 9 | ~ D5 |
| Patch Management | ✓ Control 3 | ✓ A.12 | ✓ B3 | ~ Art. 7 | — |
| Firewall & Network Security | ✓ Control 1 | ✓ A.13 | ✓ B4 | ~ Art. 9 | — |
| Malware Protection | ✓ Control 5 | ✓ A.12 | ✓ B3 | ~ Art. 7 | — |
| Secure Configuration | ✓ Control 2 | ✓ A.14 | ✓ B3 | ✓ Art. 9 | — |
| Incident Response | — | ✓ A.16 | ✓ C1, C2 | ✓ Art. 17 | ✓ D2 |
| Risk Management | — | ✓ Cl. 6 | ✓ A1, A2 | ✓ Art. 6 | ✓ D2 |
| Supply Chain / Third-Party | ~ Optional | ✓ A.15 | ✓ A4 | ✓ Art. 28-30 | ✓ D2 |
| Business Continuity | — | ✓ A.17 | ✓ D1, D2 | ✓ Art. 11-12 | — |
| Governance & Awareness | — | ✓ Cl. 5, A.7 | ✓ A1, B1 | ✓ Art. 5, 13 | ✓ D1 |
| AI Transparency & Fairness | — | — | — | — | ✓ D4 |
| Data Governance (AI) | — | ~ A.8 | — | — | ✓ D3 |