Before you begin
A short set-up section comes first so the assessment only includes what applies to your organisation. There are no right or wrong answers.
What this service does
BazGrid guides you through a structured cybersecurity readiness assessment in everyday business language, so you do not have to interpret the control framework alone.
What you may need
Some questions ask how your organisation works today, and some ask for supporting evidence such as a policy, a report or a system setting. You can continue without it and return later.
Save and return at any time
Your answers are kept as you go, so you can stop, involve a colleague, and pick up where you left off.
Self-assessment versus BazGrid validation
Everything you answer here is a self-assessment. BazGrid validation is a separate, independent review of your answers and evidence by a BazGrid specialist.
Results produced from your own answers are provisional. They are not NCA certification and become BazGrid-validated only after independent review.