Operations self-check · about 4 to 6 minutes

SOC & incident readiness

Know who acts when a signal becomes an incident. Rate 12 original prompts as Operating, Partial, Planned, Not in place or Not sure, see your readiness by area, and get a remediation template for every gap. Everything stays in your browser.

12 prompts4 areas100% privateFree

Start this assessment See all 15

Scope. 12 original operational screening prompts. Does not measure incident-response effectiveness or establish 24/7 operational coverage. Reference: NIST incident handling guidance (context only, not an endorsement).

What this assessment covers

The 12 prompts, grouped by area. Each one has a "what to look for" note and a concrete action inside the assessment.

Signals

Are priority threats linked to the logs you collect?
Can you detect missing or stale log sources?
Are alerting rules tested against expected signals?

Triage

Does every alert queue have an accountable reviewer?
Are severity and escalation criteria understood?
Can analysts retrieve asset and identity context?

Response

Are containment decisions authorized and documented?
Are investigation records preserved with appropriate access?
Are communication responsibilities and external obligations reviewed?

Learning

Has a realistic tabletop exposed decision gaps?
Are post-incident improvements assigned and tracked?
Do service owners participate in recovery validation?

How scoring works. Only rated prompts count toward the index. Not sure and unanswered prompts are reported separately and never scored as a pass or a gap. Gaps are listed highest priority first, each with a link to a matching template in the open GRC Documentation Kit. This is a conversation starter, not an audit or a certification.

Start the SOC & incident readiness assessment

Other assessments: NIST CSF 2.0 · ISO 27001 readiness · SOC 2 preparation · Cloud & identity · AI & agent security · Small business security · Web & API release readiness · Supplier security review · Backup & recovery readiness · Secure software delivery · Identity & privileged access · Mobile release readiness · Data protection operations · Security culture & role readiness