Cyber Maturity Audit

"How secure are we, really?" — the board's question that rarely gets an answer you can back up. Cyber Maturity Audit produces one: 106 subcategories of the NIST Cybersecurity Framework 2.0, each rated on a maturity scale from 0 to 4, and at the end a number with a profile behind it. THE FRAMEWORK The NIST Cybersecurity Framework comes from the National Institute of Standards and Technology, an agency of the US Department of Commerce. Version 2.0 was released in February 2024 and is aimed explicitly at organisations of every size and sector, no longer only at critical infrastructure. New in it: the Govern function, which makes cybersecurity a leadership responsibility. The framework is freely available, used worldwide, and the common language when a group parent, an insurer or an investor asks about maturity. WHY COMPANIES WORK WITH IT • Because a maturity score per function says more than a traffic light and can be compared year after year • Because customer questionnaires, cyber insurers and due diligence increasingly reference CSF categories • Because before an ISO 27001 certification it pays to know where the gaps are — that is the cheaper order of operations • Because security budgets are approved more easily when the gap has a number and a page in a report SIX FUNCTIONS, 22 CATEGORIES, 106 SUBCATEGORIES • Govern — strategy, roles, policy, oversight (31) • Identify — assets, risk, supply chain (21) • Protect — access, awareness, data, technology (22) • Detect — monitoring and analysis (11) • Respond — incident management (13) • Recover — restoration and communication (8) Every subcategory with its official text and identifier, from GV.OC-01 through RC.CO-04. FROM THE WHAT TO THE HOW The framework describes outcomes, not measures — which is exactly what makes it hard in practice. For every subcategory this app adds: one sentence for the leadership, three to five concrete steps, typical mistakes, what counts as evidence in an audit, plus effort, ownership and tool suggestions — open source first. THE MATURITY PROFILE 0 not implemented, 1 partial, 2 defined, 3 implemented, 4 continuously improved, plus "not applicable" with a justification. Evaluated per category, per function and overall against a target value you set yourself. Radar charts across all categories and per function show the shape of your programme, not just its average. A REPORT WITH YOUR LOGO A PDF with management summary, category overview with gap analysis, every open item in full length, maturity profile and detail pages. Consultancies and internal audit add their firm, logo and accent colour — the report goes to the client without rework. CSV export included. YEAR-OVER-YEAR COMPARISON Several assessments side by side, each with its own company details — for subsidiaries, sites or client engagements. The comparison shows the overall score, functions and categories with the change since the last round. NO NETWORK, NO ACCOUNT Everything stays on the device. No account, no cloud, no tracking, not a single network request — for a tool that collects your weaknesses, that is the point. Face ID or Touch ID lock optional, backup as a portable file. FREE AND PRO The first four subcategories of every function stay free forever, maturity scores and radar included. Pro opens the whole catalogue and adds the PDF report, CSV and backup export, report branding and unlimited assessments — monthly or yearly subscription, or a one-time purchase that never renews. LANGUAGES English (original), German, French, Italian and Romansh as clearly marked translations. AN INDEPENDENT TOOL This app is not affiliated with NIST and is neither reviewed nor endorsed by NIST. The framework itself is freely available. Subscriptions renew automatically until cancelled in the App Store settings. Terms of Use: https://treeinspired.com/terms.html Privacy Policy: https://treeinspired.com/privacy.html