Maturity Self-Assessment.
An interactive self-assessment scoring your organization across the six NIST CSWP 39 capability domains and five maturity levels.
Thirty-six questions. Answer Yes / No based on what is actually true today — not what's on a roadmap. The radar chart updates as you go. Your answers stay in this browser; nothing is sent to a server. Use the result as a planning aid, not as audit evidence.
Where you are.
Prioritized next actions
- Answer the questions above to receive recommendations targeted at your lowest-scoring capability domain.
The six capability domains are taken directly from NIST CSWP 39's crypto-agility framework. For the depth on each, see the Enterprise Readiness whitepaper. Use the result with the Inventory Worksheet — the inventory tells you what's deployed; this assessment tells you where the gaps are by capability. Re-run quarterly; the Governance & Policy and Vendor & Supply Chain domains tend to move first.