First — what industry are you in?

We tailor the questions so you only answer what's relevant. Healthcare gets HIPAA Security Rule questions. Everyone else gets NIST CSF 2.0 / I²SS-aligned questions.