Ism

It walks you through gap analysis, IRAP assessment prep, system authorisation pathways, and security documentation against the March 2026 ISM edition. The control applicability logic is baked in (NC/OS/PROTECTED/SECRET/TS markers), and it knows the six-step risk management cycle cold. Best for CISOs and security architects who need structured outputs like control tables with evidence requirements or full System Security Plans. It defaults to OFFICIAL: Sensitive scoping if you don't specify otherwise, which is sensible. The Essential Eight mapping is here too, since that's always the first question.