Useful tools.
Clear expectations.

Choose your starting point

Business owners: start with a small-business or readiness self-check. Security practitioners: define a test plan. Learners: work through a synthetic example. Potential clients: see how a scoped engagement is agreed.

What is free?

All currently published tools, self-checks, simulations and original document downloads on this site are free to use. They run without an account or paid AI API. Professional consulting and workshops are separate discussions, not purchases made by these tools.

What does a score mean?

A self-check index summarizes your selected known answers. It is not a probability of safety or a compliance percentage. Unknowns are shown separately. Read the full method.

Where is my work saved?

Only explicit saves write assessments, plans or roadmaps to this browser. These records are not encrypted by this site and do not synchronize across devices. Exports create files under your control. Clearing browser data can remove saved work. An enquiry is separate and never attaches the tools’ inputs automatically.

Moving to another browser or website address

Browser storage belongs to the current website address. A saved review on a private preview will not automatically appear on abdullahzarshaid.com. Export your reviews, plans and roadmap first, then import those files at the new address. Keep a private backup of exports and do not use sensitive client evidence in these public tools.

Manage saved browser data

The controls below affect only this site’s named local-storage records. They do not delete enquiries, downloaded files or data held by another website.

A few useful terms

GRC

Governance, risk and compliance: how security decisions, responsibilities and requirements are managed.

SIEM

Security information and event management: collecting and examining security events from different systems.

SOC

A security operations centre. SOC 2 is a different term referring to a type of assurance report.

Authentication and authorization

Establishing an identity, then deciding what that identity may do.

RTO and RPO

Recovery time and recovery point objectives: intended downtime and data-loss targets, not evidence that recovery will meet them.

Self-reported

An answer supplied by the user, not independently verified by this website.

Display, motion and keyboard access

Use Tab to move between controls, Enter or Space to activate buttons, and Escape to dismiss dialogs. Search also supports arrow keys. Motion can be paused beside the animation or in the display settings below, and the site respects reduced-motion preferences. Core reading pages remain available without JavaScript; interactive tools require it.

This release has automated and manual local checks, not a claim of complete WCAG conformance. Screen-reader and native-host acceptance remain part of release verification. Report a problem through the personal contact page, describing the page, browser and problem without private data.