Where does your SOC actually stand?
A condensed, SOC-CMM-inspired maturity model across five domains — Business, People, Process, Technology, Services. Pick a persona for an instant benchmark, or build your own by answering 20 short questions. Runs entirely in your browser; nothing is sent to a server.
Pick a persona for an instant rating
Business
Mission, strategy, governance, risk integrationIs the SOC's mission, scope and mandate formally defined and understood by stakeholders?
A written charter exists and stakeholders outside the SOC could describe its scope.
Does the SOC have a strategy or roadmap aligned to business risk and objectives?
A multi-year roadmap ties SOC investment to named business risks, not just tooling refresh.
Is there executive sponsorship and a defined reporting line into the business?
A named executive sponsor and a regular reporting cadence to leadership exist.
Is SOC output (findings, risk indicators) integrated into enterprise risk management?
SOC metrics feed the enterprise risk register, not just a SOC-internal dashboard.
Opens directly in Excel, Sheets or Numbers.
Loading…
More security tools
The tools people use most on PlayCISO.
Catch injected instructions hiding in content your AI agent should only read.
Score your readiness against the first international standard for AI security threats.
Critical CVEs across 21 major vendors, month by month — and what the 2026 surge means.
Build an ordered ruleset, replay labelled packets and catch shadowed and any-to-any rules.
Self-assess all six Functions, from Govern to Recover, and see your weakest one.
Search 172 threat actors across Microsoft, CrowdStrike, Mandiant and community names.