Cloudsphere

Check Your Organisation's Readiness

Ten yes/no questionnaires that show where your organisation in Indonesia stands: ISO 27001, PDP Law and BCM compliance; risk management and internal audit; cyber security maturity; and technical security testing (VAPT) readiness by domain — web, network, cloud and IoT. Results and recommendations appear instantly.

ISO 27001Cyber Security Maturity

Choose a questionnaire

Compliance & Governance

Certification and regulatory compliance readiness: ISO 27001, the PDP Law, and business continuity.

36 questions± 10 minutes

ISO 27001 Readiness Check

Thirty-six yes/no questions that map your organisation against the mandatory clauses 4 to 10 of ISO/IEC 27001:2022, then the Annex A controls that most often become audit findings. Results per clause and next steps appear as soon as you finish.

  • Clause 4 · Context of the organisation
  • Clause 5 · Leadership
  • Clause 6 · Planning
  • Clause 7 · Support
  • +7 more
Start ISO 27001
16 questions± 8 minutes

PDP Law Compliance Check

Sixteen yes/no questions that map your organisation's readiness for Indonesia's Law No. 27/2022 on Personal Data Protection (PDP Law): governance, data subject rights, security, and third parties. Results and next steps appear instantly.

  • Governance and legal basis
  • Data subject rights
  • Security and incidents
  • Third parties and data transfer
Start PDP Law
16 questions± 8 minutes

BCM (ISO 22301) Readiness Check

Sixteen yes/no questions that map your organisation's readiness to implement business continuity management per ISO 22301: governance, business impact analysis, strategy, and continuity plan testing.

  • BCM governance and policy
  • Business impact analysis and risk
  • Continuity strategy and plans
  • Testing and improvement
Start BCM

Risk Management & Internal Audit

Maturity of your enterprise risk management framework and internal audit function.

16 questions± 7 minutes

Risk Management Readiness Check

Sixteen yes/no questions that assess the maturity of your enterprise risk management framework per ISO 31000: governance, identification, treatment, and monitoring. Applicable to any type of organisation.

  • Risk framework and governance
  • Risk identification and assessment
  • Risk treatment
  • Monitoring and reporting
Start Risk Management
16 questions± 7 minutes

Internal Audit Function Readiness Check

Sixteen yes/no questions that assess the maturity of your organisation's internal audit function per the IIA Global Internal Audit Standards: independence, planning, execution, and quality assurance.

  • Independence and audit charter
  • Risk-based planning
  • Execution and reporting
  • Follow-up and quality assurance
Start Internal Audit

Technical Security Testing (VAPT)

Penetration testing readiness by domain: web applications, network, cloud, and IoT devices.

15 questions± 6 minutes

Web Application Pentest Readiness Check

Fifteen yes/no questions that measure how ready your web application and APIs are for a penetration test, based on OWASP practice.

  • Application scope and readiness
  • Application security controls
  • Follow-up
Start Web Application VAPT
15 questions± 6 minutes

Network Pentest Readiness Check

Fifteen yes/no questions that measure how ready your network infrastructure is for external and internal penetration testing.

  • Network scope
  • Segmentation and perimeter controls
  • Detection and follow-up
Start Network VAPT
15 questions± 6 minutes

Cloud Security Pentest Readiness Check

Fifteen yes/no questions that measure how ready your cloud environment (AWS, GCP, Azure) is for configuration and IAM security testing.

  • Cloud scope and governance
  • IAM and configuration
  • Detection and follow-up
Start Cloud VAPT
14 questions± 6 minutes

IoT Device Pentest Readiness Check

Fourteen yes/no questions that measure how ready your IoT and OT devices are for firmware, communication and companion API security testing.

  • Device scope
  • Firmware and communication security
  • Follow-up
Start IoT VAPT

How it works

  1. 01

    Enter a few details

    Company name, scope, your name and email. No account required.

  2. 02

    Answer yes or no

    Questions are grouped by area and take a few minutes to answer.

  3. 03

    Get your result instantly

    Score, readiness level, per-area breakdown and recommended next steps appear immediately and are sent to your email.

Frequently asked questions

Is this readiness check free and without obligation?

Yes. The questionnaire is free, needs no account, and does not commit you to any service. The result is yours.

Is the result equivalent to a formal gap analysis?

No. It is an initial picture based on your own answers. A formal gap analysis reviews documents and evidence of implementation directly, and is the natural next step if you want to proceed.

What happens to the data I enter?

Company, name and email are used to send you the result summary and so our consultants can follow up if you want. We do not share it with third parties; see our Privacy Policy.

How long does it take?

It varies by questionnaire, roughly 6 to 10 minutes: VAPT by domain (web, network, cloud, IoT) has 14 to 15 questions; the PDP Law, BCM, risk management, and internal audit questionnaires each have 16; cyber security maturity has 24; and ISO 27001 has 36 (clauses 4 to 10, then Annex A).

Which version of the standard do the questions follow?

Each questionnaire follows the relevant standard or regulation: ISO/IEC 27001:2022 for ISO 27001, ISO 22301 for BCM, ISO 31000 for risk management, the IIA Global Internal Audit Standards for internal audit, the NIST Cybersecurity Framework for cyber maturity, Indonesia's Law No. 27/2022 for the PDP Law, and OWASP/PTES/CIS Benchmark for VAPT by domain.

Not sure where to start?

Our consultants help you read the questionnaire result and plan the next steps, from gap analysis to audit support and testing.

Contact UsView Services