> For the complete documentation index, see [llms.txt](https://docs.cybaops.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.cybaops.com/modules/security-assessment.md).

# Security Assessment

### <mark style="color:$primary;">Assessing your Security Posture with CybaOps - Security Assessment</mark>&#x20;

CybaOps includes a security assessment tool designed to evaluate an organisation’s alignment with the NCSC’s 10 Steps to Cyber Security. It helps businesses quickly identify gaps in their security posture and provides guidance on best-practice measures to strengthen their overall cyber resilience.&#x20;

### <mark style="color:$primary;">What is the Security Assessment?</mark>&#x20;

The security assessment is a self-assessment of an organisations security posture. It comprises 50 multiple choice questions across the 10 categories outlined in the NCSC’s 10 steps to Cyber Security. Completing the assessment will give an organisation a cyber security achievement grade, and it will influence the Security Posture Rating.&#x20;

### <mark style="color:$primary;">How to Complete the Security Assessment</mark>&#x20;

You complete the security assessment by answering all 50 questions.&#x20;

Your progress is saved automatically and once complete, you will see best practice advice for each section.&#x20;

As you work through the assessment, you will get a grade for each category. These can vary based on the tools and processes you have in place. Having a grade for each category helps organisations to prioritise and see where they need to focus their cyber security efforts next. &#x20;

Once complete, you can download a report for the security assessment in the reports section. &#x20;

### <mark style="color:$primary;">How to Download the Security Assessment Report as a Direct Customer</mark>&#x20;

Navigate to your reports section. Click ‘New Report’ in the top right corner. &#x20;

<figure><picture><source srcset="/files/rZEOwwOmnBZPNRCP8oqp" media="(prefers-color-scheme: dark)"><img src="/files/QPkWItG2wY19ceoLQoka" alt=""></picture><figcaption></figcaption></figure>

You will then get a drawer with the option for two report types: Export or Generate. Select Export&#x20;

You will then need to enter a report title and ensure that you have the Security Assessment Overview selected.  &#x20;

<figure><picture><source srcset="/files/qNqUTzMtawhho4bjo7Nl" media="(prefers-color-scheme: dark)"><img src="/files/zyzKE3L4qlVyXpujMsvq" alt=""></picture><figcaption></figcaption></figure>

Clicking generate will then trigger the report to be generated. This can take up to 10 seconds depending on the report.&#x20;

### <mark style="color:$primary;">How to Retake your Security Assessment</mark>&#x20;

If you would like to retake your Security Assessment at any point, you can click on Retake Assessment. This will keep your existing answers but allow you to change any as your security posture changes. Once complete, click Resubmit to get your new Security Assessment score. &#x20;

### <mark style="color:$primary;">Security Assessment and Security Posture Rating</mark>&#x20;

Since the assessment is based on the NCSC 10 Steps to Cyber Security, it establishes an essential baseline for calculating your overall Security Posture rating. To maintain the accuracy of your Security Posture Rating, it is crucial that you regularly review and confirm the answers in your Security Assessment.&#x20;

It is important to note that the Security Posture Rating also incorporates other critical factors within the CybaOps portal, such as vulnerability management. Therefore, your score may fluctuate even if your Security Assessment answers remain unchanged.&#x20;

{% hint style="info" %}

#### **Action is Key**:&#x20;

The combination of timely remediation of vulnerabilities and regular reviews of your Security Assessment ensures a comprehensive and accurate reflection of your current security posture.&#x20;
{% endhint %}


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.cybaops.com/modules/security-assessment.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
