Assessment library
Saved compliance assessments
Review existing assessment records and generate a refreshed document pack.
Your assessments, drafts, workflow notes, generated packs, and backups are stored on this computer. They are not cloud-synced by this app.
Compliance route
Compliance route and safe use
Use this screen to understand how the local workspace supports Cyber Essentials and ISO 27001-style preparation without pretending to certify, audit, or legally approve the business.
Creates a practical security and compliance document pack from a local questionnaire, then helps review findings, workflow, evidence, history, backups, and follow-up.
Does not provide legal advice, ISO certification, Cyber Essentials certification, audit assurance, control testing, evidence quality checks, and it is not a compliance decision.
The pack reflects the answers entered by the user. If answers are incomplete, optimistic, or wrong, the generated documents and findings must be reviewed before use.
Use the outputs to organise policies, evidence, gaps, owners, and actions before a formal Cyber Essentials submission, ISO 27001 preparation activity, consultant review, or internal approval.
What this tool is good for
- Creating a first draft policy, evidence, and action pack for a small organisation.
- Turning questionnaire answers into review prompts, implementation actions, evidence links, owners, target dates, and history.
- Keeping a local record of assessments, drafts, generated packs, workflow follow-up, version comparison, activity, and backups.
What this tool is not
- It is not an independent audit, penetration test, certification body, lawyer, DPO, or managed security service.
- It does not prove that controls are operating, evidence is complete, or the business is compliant.
- It does not cloud-sync or recover customer systems; backup and restore only protect this app's saved assessment library.
How to use the outputs safely
- Complete the questionnaire honestly against the organisation's current operating reality.
- Generate the starter pack and read START_HERE.txt before relying on any generated policy or evidence wording.
- Review the Document Pack Summary, Implementation Action Plan, and Evidence Register with the business owner.
- Use Findings, Workflow, Due dates, and Activity to assign owners, dates, notes, and follow-up for gaps.
- Reassess after improvements, compare versions, and use the pack as preparation material for formal review rather than certification evidence by itself.
Local data & backups
Local data & backups
Use this screen before moving the app, cleaning folders, downloading copies, testing restore, or explaining the local workspace to someone else. It maps the main records created by this app and the backup discipline needed to protect them.
Active assessment packs, generated Word documents, Excel evidence trackers, START_HERE.txt files, questionnaire records, and workflow sidecars live under this folder.
Incomplete browser questionnaires are saved as draft JSON records until resumed, deleted, or completed into a normal assessment pack.
Archived assessment packs move out of the active library but keep their generated files, questionnaire record, and workflow history for later review or restore.
Backup data creates a portable ZIP that lands wherever the browser saves downloads. Keep that ZIP somewhere safe before moving computers or changing local data.
Important app records
- questionnaire_answers.json
- The saved assessment answers, company details, generated date, review date, and schema version used to build or review a pack.
- assessment_workflow.json
- The local workflow sidecar created after finding follow-up is saved. It stores status, owner, target date, notes, and activity history without rewriting questionnaire answers.
- START_HERE.txt and generated Word or Excel files
- The generated review pack. These files are practical working outputs; regenerating creates a new numbered folder rather than overwriting an earlier pack.
- Downloads
- Downloaded files are copies for review or sharing. They are not the master assessment record and changing a downloaded copy does not update the saved local pack.
Safe handling rules
- Use the browser controls for archive, restore, draft deletion, permanent delete, and backup instead of manually moving app records.
- Do not edit JSON records by hand unless you are deliberately repairing test data and have a backup first.
- This app does not cloud-sync or automatically recover another machine's records. Each computer has its own local workspace.
When to use Backup data
Use Backup data before moving computers, clearing generated_documents, testing restore, deleting archived packs, or making major local-data changes. A backup protects this app's saved assessment library; it is not a customer system recovery backup.
Start here
Start here: first-time user route
Use this screen as the plain-English route map for a first assessment. It explains the order of work from questionnaire to generated pack, review, workflow follow-up, backup, and reassessment.
Create a new assessment, enter company details, and answer the yes/no readiness questions against the organisation's current reality.
The app creates a numbered local pack with START_HERE.txt, Word policies, an action plan, a coverage matrix, and an Excel evidence register.
Read the pack in order, then use Findings, Workflow, Due dates, and Activity to assign owners, dates, notes, and follow-up.
Create a portable backup before major local-data changes, then reassess later and compare versions after improvements have been made.
Use the app in this order
- Open the app in your browser on the computer where the assessment library is stored.
- Click New assessment and enter the company name, document owner, employee count, and questionnaire answers.
- Save a draft if interrupted, or complete every question to generate the first document pack.
- Open the new pack's Files tab and start with START_HERE.txt.
- Review document_pack_summary.docx, implementation_action_plan.docx, and compliance_evidence_register.xlsx before treating the pack as useful.
- Open Findings to understand which answers create review prompts, actions, and evidence expectations.
- Use Workflow to assign owners, statuses, target dates, and notes for gap follow-up.
- Use Due dates and Activity to track planned work and audit what changed.
- Use Backup data before moving computers, testing restore, deleting archived records, or making major local-data changes.
- After improvements, review the assessment, generate a new numbered pack, and compare versions.
Do not promise
- Do not describe the output as ISO 27001 certification, Cyber Essentials certification, legal advice, audit assurance, or independent control testing.
- Do not treat generated policies, evidence rows, management notes, or workflow status as approved business content until a business owner has reviewed them.
- Do not present backup and restore as customer system recovery. It protects this app's saved assessment library only.
Ready to continue?
Continue when you understand the route: questionnaire, generated pack, START_HERE.txt, summary, action plan, evidence register, findings, workflow, backup, reassessment, and external review if needed. All outputs are draft review aids rather than compliance decisions or proof that controls are operating.
Active finding workflow
Workflow activity register
Assessment version comparison
Select two versions from the same company.
Due-date planning
Assessment reviews and finding target dates from active packs.
Backup restore preview
Validate a portable backup ZIP, review what it contains, check the restore safety guardrails, choose a controlled restore approach, and only restore after the required pre-flight confirmation is complete.
This tool protects this app's local saved assessment library. Keep backup ZIPs somewhere safe before moving computers, clearing generated_documents, or testing restore.
When would I use this?
Use backup and restore when you need to move this app's saved assessments to another computer, recover from a lost or damaged generated_documents folder, or check that a backup ZIP contains usable assessment data.
Controlled restore execution
Preview a backup ZIP before restore controls become available. Restore writes are blocked until a usable strategy is selected and the exact confirmation phrase is typed.
Restore is disabled until preview and confirmation checks pass.
Assessment workspace
Choose an assessment to inspect
Select a saved assessment from the left list to review metadata, findings, version changes, pack files, and generation actions.
Use a test company before entering real business details, then review the generated START_HERE.txt and document pack.
The browser can save an incomplete questionnaire locally, so the first pack does not need to be finished in one sitting.
Start here explains local-only records, backup expectations, and safe wording before any real business output is used.
Selected assessment
Pack review route
Start with the pack, then work the follow-up
Use this selected assessment as the bridge from generated files into findings, actions, evidence, and later reassessment.
Overview is a read-only record summary. Answer totals are descriptive and are not a compliance score, certification decision, independent assurance, or proof that controls are operating.
Recorded questionnaire answers
Recorded-answer totals are descriptive and are not a compliance score or certification decision.
Assessment findings
Loading findings...
Changes from previous version
Loading comparison...
Pack files
Active record: review/edit or generate creates a new numbered pack. Pending-only resolution appears when answers need confirmation.
Active record: copy the record path or archive this pack; use Backup data before major local changes.
Assessment draft