NIST & ISO 27001 Mini Auditor
Run a quick, practical self-check of your information security program. Review governance, risk, assets, access, operations, incident response and continual improvement against selected NIST CSF 2.0 and ISO/IEC 27001:2022 themes.
Security program assessment
Choose a framework view, then answer each question based on evidence currently in place—not plans or intentions. “Not applicable” is excluded from the score and should be justified.
Your answers are processed in this browser. This page does not transmit assessment responses to OMAGUS Consulting.
Nothing is sent automatically. The email opens in your mail app for you to review first. Prefer to write directly? contact@omagusconsulting.com
Important: This tool provides an indicative self-assessment only. It is not an official NIST CSF score, ISO/IEC 27001 audit opinion, certification decision, or guarantee of compliance. It is not a substitute for advice from your auditor or other qualified professionals. The scope of your assessment, the evidence available, the applicability of requirements and controls, risk, and auditor judgment all affect readiness and examination outcomes. This tool runs in your browser and does not transmit or store your responses on a server.
Your mini auditor report
| Priority | Area | Observation | Suggested next step |
|---|
A higher score does not establish conformity or certification readiness. For ISO 27001, scope, risk assessment, Statement of Applicability, documented information, internal audit, management review and corrective action need evidence-based evaluation.
Nothing is sent automatically. The email opens in your mail app for you to review first. Prefer to write directly? contact@omagusconsulting.com
Important: This tool provides an indicative self-assessment only. It is not an official NIST CSF score, ISO/IEC 27001 audit opinion, certification decision, or guarantee of compliance. It is not a substitute for advice from your auditor or other qualified professionals. The scope of your assessment, the evidence available, the applicability of requirements and controls, risk, and auditor judgment all affect readiness and examination outcomes. This tool runs in your browser and does not transmit or store your responses on a server.