What this measures, and why it matters
The CSRA scores your organisation against the six stages of the SHIELD framework, from how you choose which behaviours to target through to whether security spreads without the security team pushing it. You get a score out of 100, a stage-by-stage profile, and the one stage holding the rest of your programme back.
Most programmes can prove activity: courses completed, campaigns delivered, phishing clicked. Far fewer can prove change. The CSRA shows where that gap sits in about ten minutes, and gives you the language to explain it to your board.
Your score and profile appear on screen immediately. The full written report is optional, free, and sent by email. Your results are stored anonymised and kept as part of the CSRA benchmark: your scores, sector, size band, and region, with nothing that identifies you or your organisation. Your email address is used only to deliver the full report if you request it, and is never stored with your results. Privacy notice.
Answer fifteen questions
Each offers five descriptions of practice, from absent to exemplary. Pick the one closest to reality. There are no trick questions and we never ask for your organisation's name.
See your profile instantly
Your score, maturity band, SHIELD radar, and constraint stage appear on screen the moment you finish. No email, no gate, no waiting.
Benchmark against peers
The optional emailed report adds stage-by-stage recommendations, and once at least three organisations of your sector and size have taken the CSRA, how you compare with them.
The six SHIELD stages
About your organisation
Stored with your scores as anonymised benchmark data. We never ask for your organisation's name.
Your CSRA score
Want the full picture?
The written report covers all six stages, with prioritised recommendations and the research behind them, plus how you compare with organisations of your sector and size once enough have taken the assessment. Enter your work email and it arrives within a few minutes.
Your results are stored anonymised: your scores, sector, size band, and region contribute to the CSRA benchmark, with nothing that identifies you or your organisation. Your email address is used only to deliver the full report and is never stored with your results. Privacy notice.
Report on its way
Check your inbox in the next few minutes. If it has not arrived, look in spam and add noreply@cybehave.com to your safe senders.
Most organisations stall at the same three stages: Intervene, Learn, and Diffuse. Heroes identifies your real influencers, runs their development, and measures the change they drive. Start a free trial