Skip to content
Talk to us →
Diagnostic Centre81 free tools: diagnostics, builders, planners, visa check · no sign-upFree
AboutOverviewAbout RisalatCapabilities and experienceClients and partnersRisalat AcademyPortfolioTestimonialsVideo galleryCareersLife at RisalatBecome an ambassador
ProgrammesOverviewProgramme categoriesTraining calendarProgrammes by cityGlobal learning programmesIn-house programmesOnline programmes
Approach in ActionOverviewSee how we workTransformation blueprintsProgramme evaluationNeeds assessment and capacityProject delivery supportProcurement and PFM reformServices we deliver
DiagnosticsFreeOverviewDiagnostic CentreTraining Needs AssessmentProject Health CheckCapacity Development PlannerProcurement Delay AnalyserChange Readiness AssessmentCV DesignerLogframe BuilderVisa checkTeam nomination plannerTemplate libraryAll tools A to Z
InsightsOverviewAI and data in governmentClimate financePublic procurementMonitoring and evaluationProject managementLeadership
ContactContact usFAQsRequest an invoiceRequest a proposal
Talk to us →Sign in / create account

Home › Free tools › Cyber Security Basics Assessment

Cyber Security Basics Assessment

This assessment checks the cyber security basics that protect most public institutions and project offices from common attacks such as phishing and ransomware. It covers governance, access, patching, backups, awareness, incident response and suppliers. You get a score by area and clear, low-cost actions.

  • Assessment
  • 10 min
  • Free
  • Sources checked November 2026

Who it is for

  • Heads of administration and IT in public institutions
  • Project implementation units and small project offices
  • Finance and procurement teams handling payments and sensitive files
  • Managers preparing for audits or donor reviews

What you get

  • A cyber hygiene score across six areas
  • The biggest risks to address first
  • Practical low-cost actions for each area
  • An optional tailored report with a 90-day plan

How this tool works

Built on
NIST Cybersecurity Framework (CSF) 2.0; CIS Critical Security Controls
Scoring
Each answer scores from 0 (not in place) to 4 (fully in place). An area's score is the points earned as a share of the maximum for the questions you answered; the overall score is the average of the areas. Bands: Early stage 0–39%, Developing 40–69%, Advanced 70–100%.
Limitations
Results depend on the information you enter and are not verified by Risalat. This tool does not replace MAPS, PEFA, World Bank or other formal assessment methodologies, or an independent review.
Your data
What you type stays in your browser unless you save it to a free account. We receive your name, email and summary only when you open your results.
Sources checked
November 2026 (checked every month)
Team or organisation
With a free account you can invite colleagues from each department to answer the same questions. You get a consolidated dashboard: scores by area and department, where colleagues disagree, priority gaps and an action plan. Anonymous mode hides names and groups departments with fewer than 3 responses.

Need a verified result? Ask for an independent assessment by Risalat.

Programmes that build these skills

Upcoming programmes whose content matches the areas this tool measures. Your results show which fit your weakest areas.

ProgrammeCybersecurity Fundamentals for Business LeadersSingapore · 26 Jan 2027Builds: Governance and assetsProgrammeMasterclass in Cyber Security Management in TallinnTallinn · 1 Feb 2027Builds: Governance and assetsProgrammeTraining Course on Cybersecurity in Digital Health in TallinnTallinn · 8 Feb 2027Builds: Governance and assets

Nothing here for your exact need? Ask for an in-house programme built around your gaps, or browse all programmes.

Questions

Do we need technical knowledge to complete this?

No. The questions are written for managers. If you are unsure of an answer, ask your IT focal point or supplier, or choose the lower option to stay on the safe side.

Why does the tool focus on MFA and backups?

Stolen passwords and ransomware are among the most common causes of serious incidents, and MFA and protected backups are some of the most effective low-cost defences.

Is this the same as a cyber security audit?

No. It is a quick self-assessment of basic hygiene. A full audit or penetration test examines systems in depth and should be done by qualified specialists.

What frameworks is this based on?

The areas reflect widely used good practice, including the NIST Cybersecurity Framework 2.0 and the CIS Critical Security Controls, simplified for small public offices.

Based on

Sources checked: November 2026. We check the official sources every month.

This is a guidance and self-assessment tool, not a security audit or official form; always follow your national cyber security rules and the current version of your donor or financing agreement.

Go further

Digital Readiness AssessmentRequest a tailored proposal

More free tools

AI Governance and EU AI Act Readiness AssessmentEnvironmental and Social Standards Readiness Assessment (WB, ADB, EBRD, AfDB, EIB)Donor Procurement Rules Readiness Assessment (WB 2025, EBRD 2026, EU PRAG 2025)Paris Alignment and Climate Readiness AssessmentClimate Finance Proposal Readiness AssessmentAll tools →