PUBLIC PREVIEWJoin waitlist →
Sample reportSeeded demonstration data — not your data. See what a real assessment produces.

Renewal Readiness Report

MEDIUM RISK

Overall control coverage

64%

NIST 800 5361%
CIS V868%
ISO 2700163%
NIST CSF 2 062%
NIST 800 17159%
PCI DSS 464%
SOC 266%
HIPAA SECURITY RULE58%
CMMC L260%
FEDRAMP MODERATE57%
HITRUST CSF63%
GLBA SAFEGUARDS61%
NYDFS 50056%
NAIC MODEL LAW60%
FFIEC CAT59%
COBIT 201962%
CSA CCM65%
GDPR ART3261%
UK CYBER ESSENTIALS70%
ISO 2770168%
ISO 2230172%
SOX ITGC64%
CCPA CPRA62%

Estimated premium impact

0% to +10%

Control coverage of 64% places this organization in the mid-range band — no strong upward or downward pressure on premium from controls alone, though the MFA gap above is the kind of finding underwriters weight heavily.

P10

$180K

P50 (median)

$920K

P90

$4.1M

P95

$6.8M

P99

$14.2M

Mean

$1.6M

Loss Exceedance Curve

Probability that annual cyber loss exceeds a given dollar amount (from 10,000 Monte Carlo simulations).

Claimed vs. validated

  • NIST-IA-2 was claimed "yes" — Marked "yes" but a critical audit finding (MFA not enforced on legacy VPN) contradicts this.
This result blends 4 of your own reported incidents with industry baseline data (40% weight on your own history, 60% on industry data).

Gaps by framework

NIST 800 53

NIST-IA-2, NIST-SC-7, NIST-AU-6

CIS V8

CIS-6.3, CIS-8.2

ISO 27001

ISO-A.9.4.2

NIST CSF 2 0

NIST-IA-2, NIST-SC-7, NIST-AU-6

NIST 800 171

NIST-IA-2, NIST-SC-7, NIST-AU-6

PCI DSS 4

NIST-IA-2, NIST-SC-7, NIST-AU-6

SOC 2

NIST-IA-2, NIST-SC-7, NIST-AU-6

HIPAA SECURITY RULE

NIST-IA-2, NIST-SC-7, NIST-AU-6

CMMC L2

NIST-IA-2, NIST-SC-7, NIST-AU-6

FEDRAMP MODERATE

NIST-IA-2, NIST-SC-7, NIST-AU-6

HITRUST CSF

NIST-IA-2, NIST-SC-7, NIST-AU-6

GLBA SAFEGUARDS

NIST-IA-2, NIST-SC-7, NIST-AU-6

NYDFS 500

NIST-IA-2, NIST-SC-7, NIST-AU-6

NAIC MODEL LAW

NIST-IA-2, NIST-SC-7, NIST-AU-6

FFIEC CAT

NIST-IA-2, NIST-SC-7, NIST-AU-6

COBIT 2019

NIST-IA-2, NIST-SC-7, NIST-AU-6

CSA CCM

NIST-IA-2, NIST-SC-7, NIST-AU-6

GDPR ART32

NIST-IA-2, NIST-SC-7, NIST-AU-6

UK CYBER ESSENTIALS

NIST-IA-2, NIST-SC-7, NIST-AU-6

ISO 27701

ISO-A.9.4.2

SOX ITGC

NIST-IA-2, NIST-AU-6

This is a sample report using seeded demonstration data — not a real simulation. Real results are calibrated from public sources (IBM Cost of a Data Breach 2025, Verizon 2025 DBIR, Cyentia IRIS) as good-faith approximations, not proprietary actuarial data, and should not be treated as a certified actuarial assessment without professional review.

This is a sample — run your own free assessment to see your actual risk profile.

Run your own free assessment →