首页 › Free tools › Cyber Security Basics Assessment
网络安全基础评估
This assessment checks the cyber security basics that protect most public institutions and project offices from common attacks such as phishing and ransomware. It covers governance, access, patching, backups, awareness, incident response and suppliers. You get a score by area and clear, low-cost actions.
- 评估
- 10分钟
- 免费
- Sources checked November 2026
适用对象
- Heads of administration and IT in public institutions
- Project implementation units and small project offices
- Finance and procurement teams handling payments and sensitive files
- Managers preparing for audits or donor reviews
您将获得
- A cyber hygiene score across six areas
- The biggest risks to address first
- Practical low-cost actions for each area
- 可选的定制报告，附90天计划
本工具的工作原理
- 构建基础
- NIST Cybersecurity Framework (CSF) 2.0; CIS Critical Security Controls
- 评分
- 每个答案的得分为0（尚未具备）至4（完全具备）。某一领域的得分为所获分数占您已作答题目满分的比例；总分为各领域得分的平均值。等级划分：起步阶段0–39%，发展阶段40–69%，高级阶段70–100%。
- 局限性
- 结果取决于您输入的信息，未经Risalat核实。本工具不能替代MAPS、PEFA、世界银行或其他正式评估方法，也不能替代独立审查。
- 您的数据
- 您输入的内容仅保存在您的浏览器中，除非您将其保存到免费账户。只有在您打开结果时，我们才会收到您的姓名、电子邮箱和摘要。
- 信息来源核查
- November 2026 (checked every month)
- 团队或机构
- 注册免费账户后，您可以邀请各部门的同事回答相同的问题。您将获得一个汇总仪表板：按领域和部门显示的得分、同事之间存在分歧之处、优先差距以及行动计划。匿名模式会隐藏姓名，并将回复少于3份的部门合并显示。
Need a verified result? Ask for an independent assessment by Risalat.
培养这些技能的培训项目
内容与本工具所衡量领域相匹配的近期培训项目。您的结果将显示哪些项目最适合您的薄弱环节。
问题
Do we need technical knowledge to complete this?
No. The questions are written for managers. If you are unsure of an answer, ask your IT focal point or supplier, or choose the lower option to stay on the safe side.
Why does the tool focus on MFA and backups?
Stolen passwords and ransomware are among the most common causes of serious incidents, and MFA and protected backups are some of the most effective low-cost defences.
Is this the same as a cyber security audit?
No. It is a quick self-assessment of basic hygiene. A full audit or penetration test examines systems in depth and should be done by qualified specialists.
What frameworks is this based on?
The areas reflect widely used good practice, including the NIST Cybersecurity Framework 2.0 and the CIS Critical Security Controls, simplified for small public offices.
依据
- NIST Cybersecurity Framework (CSF) 2.0 Version 2.0, 2024.
- CIS Critical Security Controls Check the latest version, currently version 8.x.
Sources checked: November 2026. We check the official sources every month.
This is a guidance and self-assessment tool, not a security audit or official form; always follow your national cyber security rules and the current version of your donor or financing agreement.