A self-service maturity assessment against the SAMA Cybersecurity Framework. Answer guided questions and get a complete, board-ready report — your overall score, a domain-by-domain breakdown, gap analysis, and a prioritized action plan.
The SAMA Cybersecurity Framework spans four domains, twenty-three subdomains, and sixty-plus control areas. This tool turns that scope into a guided, ten-minute self-assessment anyone on your team can run — as often as you like.
Name, sector, and size — eight regulated categories from banking to fintech. A short setup, then straight into the assessment.
A quick 23-question pulse, or a detailed control-by-control deep dive. Switch any time.
Six yes/no questions about your environment tailor the assessment to only what applies to you.
Pick the description that matches your reality. No jargon, no scoring math. Progress saves as you go.
An interactive, presentation-ready dashboard appears the moment you finish.
The moment you finish, a complete, presentation-ready maturity report appears — six connected views that carry you from exactly where you stand to exactly what to do next.
Your overall maturity on a clean visual gauge, your level from Ad Hoc to Optimized, and an at-a-glance read on how all four framework domains scored — the whole picture, the instant you finish.
A colour-coded map of every assessed area. Green where you're strong, red where you're exposed — your weakest points jump out instantly, no reading required.
For every area, your current maturity sits against a realistic next-step target — and the whole list is sorted by the size of the gap, so the biggest opportunities are right at the top.
Specific, framework-aligned guidance for each area, tailored to your current level — filterable by priority, so the critical work rises straight to the top of the pile.
Every recommendation turns into a prioritized, tickable checklist. Work through it, check items off, and watch a one-time assessment become an improvement plan you actually run.
Expand any of the four domains to see every subdomain's score alongside the concrete steps to reach the next maturity level — the summary up top, the specifics underneath.
Then export the whole report as a file, or print it to a polished PDF for your board, your leadership, or your auditors.
One comprehensive question per subdomain, framed across five maturity levels. A complete organisational maturity picture — fast, and without being overwhelmed.
Two to three precise questions per subdomain with weighted scoring, for compliance prep and audits. Includes Smart/Guided scoping and Expert hand-picking.
Nothing you enter is ever sent to a server, stored in a database, or seen by anyone — your assessment data stays entirely with you. For a regulated financial institution, that privacy guarantee isn't a promise to trust; it's structural. Assess with complete confidence.
No cost, no sales call, no waiting. Get a professional-grade baseline whenever you want one — before an audit, after an investment, or to track progress quarter over quarter.
Not a generic maturity model with a SAMA label. Every question, level, and recommendation was authored around the framework's real structure by Saudi compliance specialists.
Most assessments tell you where you are. This one tells you what to do next — in priority order, with a checklist you can actually work from.
Plain-language questions, guided scoping, and clear visual results mean anyone on a security or compliance team can run a meaningful assessment — not only a seasoned auditor.
It's free, it's private, and it takes about ten minutes — and you walk away with a board-ready picture of exactly where you stand.
START FREE ASSESSMENTWant it walked through? Book a demo or email talktous@graxoconsulting.com
