Select Assessment Level
​This will determine how many controls are applied. See Levels Breakdown.

L1

The L1 is for orgs that are beginning their security journey.

More mature organizations might choose to complete an L1 first and then move up to L2 and then L3.

L2
The L2 is for orgs that are trying to strengthen their existing security program.

Small to medium orgs might live here permanently.

L3
​The L3 is the most comprehensive assessment.

Mature and/or highly regulated orgs will need to complete an L3.

Click Start Here
​We recommend you start at L1 and move up as needed. It's free and easy to upgrade levels.