What the diagnostic measures
The short assessment looks at scope clarity, identity, endpoints, documentation, logging, vulnerability management, incident response, training and evidence maturity.
How to use the score
A readiness score is a prioritization aid. It should help decide whether the next step is scoping, documentation, technical remediation or a full objective-level assessment.
Protect sensitive information
The diagnostic should not request raw SPRS scores, contract identifiers or controlled information. Where score data is tracked, it is bucketed according to the analytics specification.