Readiness policy

Choose a starting policy

Select the preset that best matches your review goals. The page marks the active preset or identifies the policy as custom.

• Balanced gives partial controls 50% credit and weights critical controls three times as heavily as minor controls.
• Strict evidence reduces partial credit to 25%, with the same severity weights as Balanced.
• Critical-risk focused keeps 50% partial credit but gives critical controls five times the influence of minor controls.

Review the preview

Check the partial-control credit, critical-gap influence, and two-control example. The example uses one met and one partial control of equal severity. It illustrates the calculation; it is not a forecast of your organization’s score.

Fine-tune when needed

Open Advanced policy controls to set exact values:

• Partial control credit: 0 gives no credit; 1 gives full credit.
• Critical, major, and minor control influence: higher values give that severity more influence on the total score.

Met controls earn full weighted credit. Partial controls earn the configured percentage. Unmet controls earn no credit. Controls marked not applicable do not affect the score.

For example, 0.5 gives a partial control half the credit of a met control with the same severity. Higher severity weights make both met controls and gaps at that severity count more toward the total.

Review and save

Review the change summary, then save the policy. You can discard unsaved changes and return to the last saved policy.