Security Self-Assessment Tools
Interactive tools, labs, and frameworks built on industry standards and operational intelligence.
Interactive Tools
4 toolsRisk Assessment Tool
Select your infrastructure components and receive an ISO 31000-aligned exposure score to identify your highest-priority attack surfaces.
Resilience Calculator
Answer 10 controls across configuration, protection, and response to receive a resilience classification and priority remediation action.
Cyber Security Checklist
A practical security posture checklist aligned to ASD Essential Eight, ISM, and ACSC guidance. Track progress across 8 domains including identity, patching, backups, logging, and incident response.
2026 Resilience Scorecard
Rate 11 critical controls across Kill Chain Disruptors, Detection & Visibility, and Strategic Hygiene to calculate your organisation's resilience score.
Simulation Labs
3 toolsHackSim
An interactive adversary simulation lab. Walk through a real-world attack chain — from initial RCE to Golden Ticket — and see the mitigations that would have stopped each step.
Threat Model Lab
An interactive Shostack 4-question threat modelling walkthrough applied to a real web server, plus four live attack simulators: phishing, lateral movement, detection & response, and data exfiltration.
STRIDE Model Builder
Drag-and-drop STRIDE threat classification exercise. Analyse 3 real-world scenarios — banking, hospital, and VPN — and correctly categorise threats to earn your rank.
Frameworks & Guides
7 toolsAI Security Guide
An interactive guide to AI security in the Australian context — ASD framework, Traffic Light Protocol, Data Spill Playbook, Vendor Vetting Checklist, and Q&A prep for executive briefings.
IRAP Process Guide
A comprehensive guide to the Information Security Registered Assessors Program (IRAP) — covering the regulatory stack, assessment stages, boundary definitions, documentation requirements, roles, and authorisation matrix.
SSP Annex — March 2026
An interactive ISM controls checklist based on the ACSC's March 2026 release. Assess implementation status across Principles and ISM Controls, then export a formatted PDF, DOCX or Markdown Version.
2026 Top 35
A reordering of the original DSD Top 35 strategies, elevated for the 2026 threat landscape: identity-first attacks, AI-automated exploits, and supply chain fragility.
The 5 Knows of Data Security
A practical framework covering the five essential principles of data security — from understanding your data's value to assessing how well it's protected.
Bill's Memo
The seminal 2002 memo from Bill Gates to all Microsoft employees, establishing Trustworthy Computing as the company's highest priority.
Historical Viewpoint
An interactive timeline tracing the evolution of cybersecurity standards and practice from 1990 to 2024 — from foundational frameworks to adversarial simulation.
ISO 27001 Toolkit
2 toolsISO 27001:2022 Guide
Interactive internal reference covering all 7 mandatory clauses (4–10) and all 93 Annex A controls from ISO/IEC 27001:2022, with CIA triad mapping and key 2013→2022 change summary.
ISMS Toolkit
Five integrated tools: SoA Builder, Implementation Tracker, Risk Register, Gap Assessment, and Evidence Locker — everything needed to build and evidence a certifiable ISO 27001 ISMS.
ISM Controls
2 toolsISM Control Catalogue
Search and filter all ISM controls by keyword, guideline, security classification (NC through TS), or Essential Eight maturity level. Bookmark controls for your assessments and export your selection to CSV.
Compliance Reporting Dashboard
Automatically visualises ISM compliance progress over time from your SSP Annex data — implementation gap analysis, risk trend lines, CSF function radar, and top risk controls requiring attention.
Threat Intelligence
5 toolsThreat Actor Groups
A six-tier adversary capability framework with profiled threat groups — including Talbot (Level 6 nation-state) and Jakemann (Level 5 supply chain) — covering TTPs, targeting sectors, and operational characteristics.
TTP Mapper
Map threat actors to their MITRE ATT&CK techniques and filter by your industry to see which adversaries target your sector and exactly how they operate.
Threat Intelligence Dashboard
Select your industry sector to visualise active threat actors, their MITRE ATT&CK TTPs, and the ISM controls most effective against the adversaries targeting your sector.
Anthem Breach Walkthrough
Interactive case study of the 2014–2015 Deep Panda nation-state attack on Anthem — 78.8 million records stolen. Explore the full timeline, what was taken, security failures, and the controls that would have stopped them.
Hacker Tools & Techniques Lab Guide
ASD/ACSC Privileged User Training — June 2026. Step-by-step walkthrough of attacker tooling including Metasploit exploitation, Pass-the-Hash with Mimikatz, Golden Ticket creation, network propagation, and log analysis.