The readiness score on the Overview shows in one number how far your organization is with the security controls that apply to you. It helps you see progress and decide what to do next.
How the score is worked out
- It counts the controls of your package's library set that apply to you (based on the setup questions).
- The score is the share of those controls with the status Implemented. Controls marked Not applicable are not counted.
- Below the number you see "X of Y controls implemented" and how many are Not added yet, plus a bar for each area of the library.
How to read and raise it
- Open Overview in the menu and look at the Readiness panel.
- Under What to do next, you find open controls, the ones customers ask about most first. Click one to open the control, or the library if it is not added yet.
- Add missing controls with Open the library, then Add or Add N controls.
- In Controls, set each control's Status as the work goes on: Not started, In progress, Implemented or Not applicable.
What else the Overview shows
- Cards for Open risks, Controls implemented, Active incidents and Overdue tasks.
- The Risk heat map of open risks by likelihood and impact.
- Needs attention: expired or expiring evidence, overdue tasks and reviews, and critical open risks.
Tips
- Members see the score and the cards but cannot change a control's status; that needs an owner or admin. Tell them when a control is done, or add the proof in Evidence.
- If the Set up button is shown, answer the five setup questions first: without them, all controls count.
- The Frameworks page (from the Supplier Ready package) shows a separate readiness for NIS2 Article 21(2) and ISO/IEC 27001 Annex A.
- The score is included in every package; the size of the library set depends on your package.