Free worksheet · Cyber risk assessment

The Cyber Risk Assessment Worksheet

A simple, repeatable way to find, score and prioritize your top security risks.

  • A four-step method based on NIST SP 800-30
  • Threat and weakness prompts to get you started
  • A fill-in risk register

Get the free worksheet

Free PDF. We'll email you a copy too.

What's inside

Four steps and a risk register

Step 1: List what matters

Systems, data, vendors and processes that can't stop.

Step 2: Think through threats

Seven common threats to walk through.

Step 3: Note the weaknesses

Six gaps attackers look for first.

Step 4: Score and treat

A 5x5 scoring method and treatment options.

Risk register

A fill-in table to track owners and dates.

Your next 30 days

A short action plan so the worksheet turns into progress.

Who it's for

Built for

  • Companies that need a documented risk assessment for an audit
  • IT leaders setting next year's security budget
  • Teams doing their first formal assessment

Rather have it done for you?

We run independent risk assessments that satisfy SOC 2, HIPAA, ISO 27001 and CMMC requirements, and turn the results into a roadmap.

Book a 30-minute call