The Readiness page provides a comprehensive view of your organisation's preparedness for NCA compliance assessment. It aggregates data from controls, evidence, gap assessments, and audits into a single certification-readiness checklist.
Readiness Stages
| Stage | Description |
|---|---|
| Not Started | ECC compliance programme not yet initiated |
| Assessment | Initial gap assessment underway, baseline being established |
| Remediation | Actively closing gaps and implementing controls |
| Evidence Collection | Controls implemented, gathering and linking evidence documentation |
| Internal Review | Conducting self-assessment to validate readiness before NCA audit |
| Audit Ready | All checklist items satisfied, ready for formal NCA assessment |
| Compliant | NCA audit passed, ongoing monitoring and maintenance |
Certification Checklist
The readiness checklist automatically evaluates the following criteria and marks each as complete or incomplete:
Every ECC control has an implementation status set (Implemented, In Progress, or justified Not Applicable). No controls remain in "Not Started" status.
At least 90% of applicable controls are marked as Implemented. Controls marked Not Applicable are excluded from the calculation.
Every control marked as Implemented has at least one evidence document linked. Controls without evidence are flagged for attention.
A gap assessment has been completed within the last 90 days to ensure the compliance snapshot is current.
All critical and high severity audit findings have been remediated and closed. Medium and low findings may remain open but should have corrective actions assigned.
A management review has been held within the last 90 days demonstrating active governance oversight.
All required cybersecurity policies are approved by management, distributed to relevant personnel, and within their review period.
Export Readiness Report
Click "Export Readiness Report" to generate a PDF or Excel summary of your compliance posture. This report includes the overall score, domain breakdown, checklist status, and a list of remaining gaps. It can be shared with NCA auditors or senior management.