NanoAudit™ Free Business Cyber Risk Assessment – adaptive CIS Controls v8.1 IG1 and IG2 assessment for New Zealand small and medium businesses.
1About your businessTailor the assessment
2Adaptive assessmentIG1 Foundation or IG2 Enhanced
3Verify detailsBusiness + verified email
4Your reportPersonalised recommendations

About your business

These answers help tailor the free assessment to your environment.

Step 1 of 4
Enter 0 if you are a sole trader with no employees. NanoAudit uses employee count as one input to the adaptive assessment profile.
NanoAudit business classificationSmall Business5 employees. NanoAudit classifies organisations with fewer than 20 employees as Small Business.
NanoAudit assessment profileIG1 FoundationA foundational assessment is currently indicated. This is a NanoAudit profile, not an official CIS Implementation Group determination.

0/ 100
Assessment complete

Your NanoAudit snapshot is ready.

070%+ areas
0Priority areas
0Areas assessed
🔒 Free report ready

Your ranked posture areas and priority actions are held until your email is verified.

Your report is linked to this verified address.
A six-digit code will be sent to your work email. It expires after 10 minutes.
NanoTech IT


Email verified ✓

NanoAudit™ Free Business Cyber Risk Assessment Report

0/ 100

070%+ areas
0Priority areas
0Areas assessed

Security posture by area — ranked by criticality

0–49% Critical50–69% High70–84% Medium85–100% Good

Priority actions

Framework context

NanoAudit Free uses an adaptive assessment profile. IG1 Foundation questions test essential cyber hygiene themes; an IG2 Enhanced profile adds a second, equally weighted layer of maturity questions. NCSC and NZISM mappings provide New Zealand context only and do not determine compliance.

CIS Controls v8.1 — IG1 FoundationFoundational essential cyber hygiene layer included in every assessment.
CIS Controls v8.1 — IG2 EnhancedExpanded maturity layer used where the NanoAudit risk profile indicates additional complexity or exposure.
NCSC Minimum Cyber Security StandardsNew Zealand foundational security standards used for local context.
NZISM v3.9Selected technical controls supporting the NCSC context.

NanoAudit Free is a high-level adaptive SMB self-assessment informed by selected CIS Controls v8.1 IG1 and IG2 themes, cross-referenced by NanoTech IT to the NCSC Minimum Cyber Security Standards and selected NZISM v3.9 controls. The NanoAudit Assessment Profile is a product decision based on employee count, information sensitivity, technology complexity, IT/security responsibility and application-development exposure; it is not an official CIS Implementation Group determination. The assessment samples selected themes only and does not assess every CIS safeguard, NCSC Standard requirement or NZISM control. It is not certification, a compliance audit, penetration test, legal opinion, formal assurance engagement or guarantee that a cyber incident will not occur.

Talk to NanoTech IT →
NanoSecure

Want to validate or strengthen your security posture with NanoSecure™?

NanoAudit provides the snapshot. NanoSecure™ helps small and medium businesses validate, strengthen and maintain practical cyber protection, whether you have priority gaps to address or want to stay ahead proactively.

Explore NanoSecure™ →