Every free assessment gives you a result straight away. The optional premium report turns your answers into a branded PDF and a live Excel workbook you can act on and hand to someone else. The samples below are grouped the same way as the Assessments menu: gap assessments, Data Privacy, Information Security, Artificial Intelligence, Business Continuity and Other Assessments. Each one is prepared for a fictional organization, so you can see exactly what you get before you buy.
Gap assessments
One report format for every framework. The sample below is for ISO 27001; the links under it open the sample for each of the others.
Gap assessment report
See what the premium gap assessment report looks like
A worked sample for a fictional organization: readiness by area, every open gap in a remediation plan, an AI-assisted analysis with priorities and a 30/60/90-day roadmap, plus the live Excel workbook.
Sample gap reports by framework
ISO 27001ISO 42001SOC 2NIST CSF 2.0CIS ControlsPCI DSS 4.0BSI C5NIS2CMMC 2.0IEC 62443NIST SP 800-171NIST RMFNIST SP 800-53FedRAMPEU AI ActGDPRUK GDPRCCPA/CPRAHIPAAISO 27701DORAISO 22301ISO 9001IATF 16949ISO 13485ISO 45001SAMA CSFISO 14001ISO 20000NCA ECCHACCPISO 31000Data governanceProject management
Data Privacy
Records of processing, DPIAs, legitimate interests and transfer impact assessments, and privacy risk.
Records of processing activities (ROPA) report
See what the premium records of processing activities report looks like
A worked record of processing activities for a fictional organization: the controller's details and the Article 30(5) check, the register of activities, one page per activity with every Article 30 content, the lawful bases, transfers and retention, every finding with what closes it, an AI-assisted analysis with a 30/60/90-day roadmap, plus the Excel register.
Data protection impact assessment (DPIA) report
See what the premium data protection impact assessment report looks like
A worked DPIA for a fictional organization: the screening result, the description of the processing, the necessity and proportionality test, every risk to individuals with its measures, the DPO's advice and sign-off, every finding with what closes it, an AI-assisted analysis with a 30/60/90-day roadmap, plus the live Excel workbook.
Legitimate interests assessment (LIA) report
See what the premium legitimate interests assessment report looks like
A worked LIA for a fictional organization: the screening, the purpose test, the necessity and balancing tests, every impact on the people concerned with its safeguards and GDPR references, the data protection advice and conclusion, every finding with what closes it, an AI-assisted analysis with a 30/60/90-day roadmap, plus the live Excel workbook.
Transfer impact assessment (TIA) report
See what the premium transfer impact assessment report looks like
A worked TIA for a fictional organization: the screening result, the transfer and its tool, the laws and practice of the destination, every transfer risk with its supplementary measures, the importer's input and sign-off, every finding with what closes it, an AI-assisted analysis with a 30/60/90-day roadmap, plus the live Excel workbook.
Privacy risk assessment report
See what the premium privacy risk assessment report looks like
A worked sample for a fictional organization: the ranked register of privacy risks, heat maps before and after treatment, the treatment plan with ISO 27701 Annex A references, every finding with the document that closes it, an AI-assisted analysis with a 30/60/90-day roadmap, plus the live Excel workbook with a Statement of Applicability starter.
Information Security
Information security risk to ISO 27001 and third-party (vendor) risk.
ISO 27001 risk assessment report
See what the premium risk assessment report looks like
A worked sample for a fictional organization: the ranked risk register, heat maps before and after treatment, the treatment plan, every finding with the document that closes it, an AI-assisted analysis with a 30/60/90-day roadmap, plus the live Excel workbook with a Statement of Applicability starter.
Third-party (vendor) risk assessment report
See what the premium third-party risk assessment report looks like
A worked vendor risk assessment for a fictional organization: the tier, the vendor profile and due diligence, every risk with its controls and ISO 27001, NIST and DORA references, heat maps before and after, the review and decision, every finding with what closes it, an AI-assisted analysis with a 30/60/90-day roadmap, plus the live Excel workbook.
Artificial Intelligence
AI risk to ISO 42001 and AI system impact to ISO 42005.
AI risk assessment report
See what the premium AI risk assessment report looks like
A worked sample for a fictional organization: the ranked register of AI risks, heat maps before and after treatment, the treatment plan with ISO 42001 Annex A references, every finding with the document that closes it, an AI-assisted analysis with a 30/60/90-day roadmap, plus the live Excel workbook with a Statement of Applicability starter.
AI impact assessment (ISO 42005) report
See what the premium AI impact assessment report looks like
A worked AI system impact assessment for a fictional organization: the screening, the description of the system, the safeguards for each dimension of impact, every impact on people and society with its measures and ISO 42001 Annex A references, the review and decision, every finding with what closes it, an AI-assisted analysis with a 30/60/90-day roadmap, plus the live Excel workbook.
Business Continuity
Business impact analysis and continuity risk to ISO 22301.
Business impact analysis report
See what the premium BIA report looks like
A worked sample for a fictional organization: the recovery sequence, impact over time, dependencies and findings, an AI-assisted analysis with priorities and a 30/60/90-day roadmap, plus the live Excel workbook.
Business continuity risk assessment report
See what the premium business continuity risk assessment report looks like
A worked sample for a fictional organization: the ranked register of disruption risks, heat maps before and after treatment, the continuity measures chosen for each, every finding with the document that closes it, an AI-assisted analysis with a 30/60/90-day roadmap, plus the live Excel workbook.
Other Assessments
Enterprise risk across strategy, finance, operations and compliance.
Enterprise risk assessment report
See what the premium enterprise risk assessment report looks like
A worked sample for a fictional organization: the ranked enterprise risk register, heat maps before and after treatment, the treatment plan with its controls, every finding with the document that closes it, an AI-assisted analysis with a 30/60/90-day roadmap, plus the live Excel workbook.
What every premium report includes
- A branded PDF report and a live Excel workbook that recalculates as you update it
- An AI-assisted analysis written from your own answers, with priorities and a 30/60/90-day roadmap
- The document that closes each gap or finding, linked to the matching toolkit
- A one-off purchase per assessment, regenerated free whenever you update your answers
The samples are for illustration and describe a fictional organization. A real report reflects only the information you enter; it is a self-assessment, not an audit or certification.