Compliance & GRC Calculators
30 free compliance & grc calculators in Cyber Security.
- Audit Coverage CalculatorTest an audit plan for coverage and feasibility: annual and cycle coverage, high-risk coverage, auditor-day capacity and finding closure.
- Audit Finding Severity CalculatorRate an audit finding on control importance, pervasiveness, exposure, regulatory impact and recurrence, with an SLA and escalation route.
- Business Continuity CalculatorScore a business continuity programme on plan coverage, exercising, achievable recovery against the MTPD, alternate capacity and supplier contingency.
- Business Impact Analysis CalculatorCost an outage for a BIA: lost margin, idle staff, penalties, recovery and reputational uplift, tested against the MTPD and the proposed RTO.
- CIS Controls Coverage CalculatorMeasure CIS Controls v8 coverage across the 153 safeguards and 18 controls, scored against your IG1, IG2 or IG3 target.
- Compliance Cost CalculatorTotal the annual cost of a compliance programme across audit fees, consultancy, internal effort, tooling and evidence, per employee and per framework.
- Control Effectiveness CalculatorRate a control on design, operating effectiveness, sample deviations, population coverage and automation, and get an audit-style conclusion.
- Control Gap CalculatorSize a control gap against any framework: weighted gap, coverage, maturity shortfall and the effort and cost to close it.
- Cyber Resilience CalculatorScore cyber resilience across anticipate, withstand, detect, respond and recover, using MTTD, MTTR, segmentation and proven immutable restores.
- Disaster Recovery RPO CalculatorDerive the RPO your replication mode and backup interval actually deliver, the data at risk in the worst case, and the interval a target demands.
- Disaster Recovery RTO CalculatorTest an RTO against reality: detection, decision and provisioning time plus the restore time your data volume and throughput actually allow.
- Enterprise Risk Score CalculatorCombine cyber, operational, compliance, third-party, financial and strategic risk into one weighted enterprise score against your stated appetite.
- Exception Risk CalculatorScore a policy exception or risk acceptance: control bypassed, exposure window, blast radius and compensating controls, with an approval level.
- GDPR Compliance CalculatorScore GDPR accountability across records of processing, lawful basis, DSAR and 72-hour breach timelines, with Article 83 fine ceilings.
- Governance Maturity CalculatorScore security governance maturity across eight dimensions on a 1–5 CMMI-style scale, with the weakest dimension and a roadmap estimate.
- GRC Health Score CalculatorRoll nine GRC signals into one health score: policy currency, control testing, finding closure, register freshness, exceptions, training and coverage.
- HIPAA Compliance CalculatorScore HIPAA Security Rule posture across the administrative, physical and technical safeguards plus required and addressable specifications.
- Inherent Risk CalculatorScore inherent risk before any control credit from threat, exposure and vulnerability against asset value, data sensitivity and regulatory reach.
- ISO 27001 Compliance CalculatorScore ISMS readiness against the 93 Annex A controls in their four themes plus clauses 4–10, and size the remaining certification gap.
- NIST CSF Maturity CalculatorScore the six NIST CSF 2.0 functions on the 1–4 implementation tier scale, find the weakest function and the gap to your target tier.
- PCI DSS Compliance CalculatorTrack PCI DSS v4.0 readiness across the 12 requirements and roughly 277 sub-requirements, with compensating controls and ASV scans counted.
- Residual Risk CalculatorWork out residual risk from inherent risk and layered control effectiveness, on both the 25-point scale and in annualised loss expectancy.
- Risk Appetite CalculatorTurn a risk appetite statement into numbers: appetite and tolerance thresholds, current utilisation, headroom and worst-case survivability.
- Risk Heatmap CalculatorPlace a risk on a 3×3, 4×4 or 5×5 heatmap with multiplicative or additive scoring, and see the zone, quadrant and appetite verdict.
- Risk Priority Number CalculatorCompute an FMEA risk priority number from severity, occurrence and detection on the 1–10 scales, with criticality and an action priority.
- Risk Register CalculatorRoll a risk register up into one health score: severity mix, treatment backlog, accepted risks and how much sits above appetite.
- Security Investment ROI CalculatorBuild a ROSI case for a control: ALE before and after, total annual cost, net benefit, payback, discounted NPV and the break-even mitigation rate.
- SOC 2 Readiness CalculatorAssess SOC 2 readiness across the CC1–CC9 common criteria, your control matrix, the observation window and known exceptions.
- Third-Party Risk CalculatorScore a whole third-party risk programme: assessment coverage, provider concentration, fourth-party visibility, audit rights and remediation speed.
- Vendor Risk CalculatorTier a single vendor on data, access, criticality and spend, weigh the assurance evidence, and get residual risk plus a reassessment interval.