Cryptographic Discovery
Visibility of cryptographic assets and dependencies.
Designed as a separate assessment experience.
Free · Private · Browser-onlyThe tool complements the educational knowledge hub, but its purpose is structured reflection and prioritisation rather than content browsing.
Before you begin
This is a reflection tool, not an audit.
The assessment is designed for security, risk, governance and architecture conversations. It does not test technical implementations or provide assurance that cryptographic controls are effective.
Choose the answer that best reflects the organisation today. If evidence is unavailable, Unknown is usually more informative than assuming a control exists. Unknown responses reduce assessment confidence; they are not treated as evidence that a capability is absent.
Privacy by design
No company name, email address or technical artefacts are requested. Scoring runs locally in your browser. This page does not send your assessment answers to a backend.
16 questions · 8 domains
Assess your current resilience foundations.
Your indicative result
Resilience profile
—/ 100
How to use this result
Use lower-maturity or uncertain domains as prompts for evidence gathering and risk conversations — not as automatic findings. An Unknown answer means there is insufficient evidence to assess that question; it does not mean the capability is absent.
Educational self-assessment only. Results are indicative and do not constitute professional advice, certification, audit, assurance or a formal risk assessment. Organisational context, threat exposure, regulatory obligations and control effectiveness must be considered separately.
Assessment model
What the questions cover.
Dependency Mapping
Connection between cryptography, systems, data and business services.
Cryptography Governance
Policy, standards, ownership, exceptions and oversight.
Crypto-Agility
Ability to replace cryptography safely when requirements change.
PKI & Certificates
Certificate lifecycle, trust dependencies and ownership.
Key Management
Key lifecycle, access, recovery and accountability.
Third-Party Dependencies
Supplier visibility, obligations and migration dependencies.
Quantum Readiness
Understanding exposure and preparing for PQC transition.