ALL TOOLS
Flagship metric · CARS v1.0

Composite Australia Risk Score

Six weighted questions across CPS 234, CPS 230, Essential Eight, privacy, third-party and resilience posture. Answer honestly — the score is computed locally in your browser.

01Information security capability is commensurate with threats (CPS 234)

w · 20

02Critical operations mapped with board-approved tolerance levels (CPS 230)

w · 20

03Essential Eight at Maturity Level 2 or above

w · 15

04Privacy program covers all 13 APPs with tested NDB response

w · 15

05Material service providers registered with fourth-party visibility

w · 15

06Severe-but-plausible scenarios exercised in the last 12 months

w · 15