Compliance & GRC Calculators

30 free compliance & grc calculators in Cyber Security.

Audit Coverage CalculatorTest an audit plan for coverage and feasibility: annual and cycle coverage, high-risk coverage, auditor-day capacity and finding closure.
Audit Finding Severity CalculatorRate an audit finding on control importance, pervasiveness, exposure, regulatory impact and recurrence, with an SLA and escalation route.
Business Continuity CalculatorScore a business continuity programme on plan coverage, exercising, achievable recovery against the MTPD, alternate capacity and supplier contingency.
Business Impact Analysis CalculatorCost an outage for a BIA: lost margin, idle staff, penalties, recovery and reputational uplift, tested against the MTPD and the proposed RTO.
CIS Controls Coverage CalculatorMeasure CIS Controls v8 coverage across the 153 safeguards and 18 controls, scored against your IG1, IG2 or IG3 target.
Compliance Cost CalculatorTotal the annual cost of a compliance programme across audit fees, consultancy, internal effort, tooling and evidence, per employee and per framework.
Control Effectiveness CalculatorRate a control on design, operating effectiveness, sample deviations, population coverage and automation, and get an audit-style conclusion.
Control Gap CalculatorSize a control gap against any framework: weighted gap, coverage, maturity shortfall and the effort and cost to close it.
Cyber Resilience CalculatorScore cyber resilience across anticipate, withstand, detect, respond and recover, using MTTD, MTTR, segmentation and proven immutable restores.
Disaster Recovery RPO CalculatorDerive the RPO your replication mode and backup interval actually deliver, the data at risk in the worst case, and the interval a target demands.
Disaster Recovery RTO CalculatorTest an RTO against reality: detection, decision and provisioning time plus the restore time your data volume and throughput actually allow.
Enterprise Risk Score CalculatorCombine cyber, operational, compliance, third-party, financial and strategic risk into one weighted enterprise score against your stated appetite.
Exception Risk CalculatorScore a policy exception or risk acceptance: control bypassed, exposure window, blast radius and compensating controls, with an approval level.
GDPR Compliance CalculatorScore GDPR accountability across records of processing, lawful basis, DSAR and 72-hour breach timelines, with Article 83 fine ceilings.
Governance Maturity CalculatorScore security governance maturity across eight dimensions on a 1–5 CMMI-style scale, with the weakest dimension and a roadmap estimate.
GRC Health Score CalculatorRoll nine GRC signals into one health score: policy currency, control testing, finding closure, register freshness, exceptions, training and coverage.
HIPAA Compliance CalculatorScore HIPAA Security Rule posture across the administrative, physical and technical safeguards plus required and addressable specifications.
Inherent Risk CalculatorScore inherent risk before any control credit from threat, exposure and vulnerability against asset value, data sensitivity and regulatory reach.
ISO 27001 Compliance CalculatorScore ISMS readiness against the 93 Annex A controls in their four themes plus clauses 4–10, and size the remaining certification gap.
NIST CSF Maturity CalculatorScore the six NIST CSF 2.0 functions on the 1–4 implementation tier scale, find the weakest function and the gap to your target tier.
PCI DSS Compliance CalculatorTrack PCI DSS v4.0 readiness across the 12 requirements and roughly 277 sub-requirements, with compensating controls and ASV scans counted.
Residual Risk CalculatorWork out residual risk from inherent risk and layered control effectiveness, on both the 25-point scale and in annualised loss expectancy.
Risk Appetite CalculatorTurn a risk appetite statement into numbers: appetite and tolerance thresholds, current utilisation, headroom and worst-case survivability.
Risk Heatmap CalculatorPlace a risk on a 3×3, 4×4 or 5×5 heatmap with multiplicative or additive scoring, and see the zone, quadrant and appetite verdict.
Risk Priority Number CalculatorCompute an FMEA risk priority number from severity, occurrence and detection on the 1–10 scales, with criticality and an action priority.
Risk Register CalculatorRoll a risk register up into one health score: severity mix, treatment backlog, accepted risks and how much sits above appetite.
Security Investment ROI CalculatorBuild a ROSI case for a control: ALE before and after, total annual cost, net benefit, payback, discounted NPV and the break-even mitigation rate.
SOC 2 Readiness CalculatorAssess SOC 2 readiness across the CC1–CC9 common criteria, your control matrix, the observation window and known exceptions.
Third-Party Risk CalculatorScore a whole third-party risk programme: assessment coverage, provider concentration, fourth-party visibility, audit rights and remediation speed.
Vendor Risk CalculatorTier a single vendor on data, access, criticality and spend, weigh the assurance evidence, and get residual risk plus a reassessment interval.