Shadow tools, leaky data, ungoverned agents. Twelve control checks, five domains, one honest read. Find out before your auditors do.
Enable JavaScript to run the scan, or skip straight to a human and price the leak together: Find the money in my business →
How the score works: each statement is a control; missing or unknown controls score as exposure ("not sure" counts: visibility is control #1). Domains are weighted equally; the grade bands are ours, and deliberately conservative.
A self-assessment locates exposure; governance that survives an audit gets designed in. We build the policy, guardrails, and audit trail in 30 days, governed from day one. How the method works →