Free resources
Three things you can use without talking to anyone. No email, no gate, no follow-up.
Sorami Consulting publishes these because the questions they answer come up before anyone is ready to commission work, and a buyer who can answer them is easier to help than one who cannot. The two self-checks score in your browser and send nothing anywhere. The report is a download with no form in front of it.
All free, all ungated.
SOC 2 readiness self-check
Twenty questions across the Trust Services Criteria, scored in your browser, with what each band means.
Self-assessment. Not an audit opinion.
Open itEssential Eight Maturity Level 2 self-check
Sixteen questions, two per mitigation strategy, against the ASD maturity model.
Self-assessment. Not an assessment against the ASD model.
Open itIllustrative penetration test report
A 19-page example with a section-by-section explanation of what each part is for.
Illustrative, built from synthetic findings. Not a client report.
Open itThe guides.
The guides cover the decisions that come before an engagement.
Used one and want the answers looked at?
Send us what you scored and the deadline you are working to. We reply within one business day.
Last reviewed: