Shadow tools, leaky data, ungoverned agents. Twelve control checks, five domains, one honest read β find out before your auditors do.
Enable JavaScript to run the scan β or skip straight to a human: book a 30-minute call β and we'll price the leak together.
How the score works: each statement is a control; missing or unknown controls score as exposure ("not sure" counts β visibility is control #1). Domains are weighted equally; the grade bands are ours, and deliberately conservative.
A self-assessment locates exposure; governance that survives an audit gets designed in. We build the policy, guardrails, and audit trail in 30 days β governed from day one. How the method works β