Security & Data Readiness Diagnostic

Domain 1 of 5 • Security Analytics

How does your organization monitor security threats and access anomalies?

Select the description that most accurately matches your current setup:

Ad-hoc or Decentralized Logs

Logs live across cloud consoles and individual servers with no centralized SIEM; we only review logs when something breaks.

Basic Log Ingestion with High Noise

We send logs to a central tool (e.g. CloudWatch, basic Datadog), but alerts are noisy, false-positive heavy, and frequently ignored.

Managed SIEM with Detection Rules

Active SIEM (Splunk, Elastic, or Sentinel) with tuned detection rules and designated engineers handling high-severity escalations.

Continuous Behavioral Telemetry & Automated SOAR

Advanced behavioral anomaly modeling, real-time threat intelligence correlation, and automated containment playbooks.

Domain 2 of 5 • IT Audit & Compliance

What is your current posture regarding regulatory compliance (SOC 2, ISO 27001, HIPAA)?

Select your team's compliance and audit status:

No Formal Framework Implemented

We do not currently have SOC 2 or ISO certification; customer security questionnaires are handled manually and painfully.

Impending Audit or Manual Checklists

Enterprise prospects require SOC 2 / ISO soon, but we rely on spreadsheets and manual screenshot hunting for evidence.

Certified with Semi-Automated Evidence

We have achieved SOC 2 Type I or II using a compliance platform, but remediations and vendor reviews still require significant manual overhead.

Continuous Automated Compliance Pipeline

Infrastructure as code, automated continuous control testing, zero-trust IAM policies, and clean auditor sign-offs year over year.

Domain 3 of 5 • Incident Forensics

If an endpoint or database was breached today, how prepared is your response?

Evaluate your forensic reconstruction readiness:

Unprepared / No Runbook

No written incident response plan, forensic data retention policies, or assigned technical lead for breach investigation.

Basic Runbook, Untested Forensics

We have a generic incident response document, but haven't performed forensic drills, memory capture, or data exposure blast radius checks.

Trained Response Team with Log Trails

Incident playbooks are documented; engineers know how to isolate compromised hosts and preserve cloud audit trails.

Institutional Forensics & Retainer Readiness

Complete chain of custody preservation, automated memory/disk snapshotting, forensic playbooks, and rehearsed tabletop simulations.

Domain 4 of 5 • Data Pipelines

How mature is your data infrastructure (ETL/ELT, cleaning, warehouse)?

Assess the health and reliability of your data flows:

Disjointed Silos & CSV Exports

Data is trapped in disconnected SaaS tools and production databases; reports are cobbled together manually in Excel.

Fragile Custom Scripts

Basic pipelines move data, but scripts fail frequently on schema changes, duplicate records exist, and data hygiene is inconsistent.

Modern Data Warehouse (Snowflake / BigQuery)

Centralized cloud warehouse with automated ingestion; dbt transformations in place with baseline data quality checks.

Resilient, Governed Real-Time Pipelines

High-throughput fault-tolerant pipeline orchestration, automated schema validation, PII tokenization, and sub-minute data freshness.

Domain 5 of 5 • Visualization & Dashboards

How easily can executives and operators extract clear insight from your systems?

Evaluate visibility across business and security performance:

Blind Spots / No Real-Time Dashboards

Leadership waits days or weeks for end-of-month manual reports; zero cross-system visibility between security posture and business KPIs.

Scattered Tool-Specific Graphs

Each SaaS tool has its own dashboard, but nobody has a unified single-pane-of-glass; metrics often contradict one another.

Unified BI Portal (Tableau / Power BI)

Central executive dashboard modeling company KPIs, with defined user permissions and daily automated refreshes.

Unified Security & Executive Intelligence Platform

Live operational and threat telemetry correlated in real-time, predictive threshold alerting, and instant drill-downs for board and C-suite.

Diagnostic Completed

Your Organizational Maturity Score

Calculated across security telemetry, audit readiness, and data pipeline integrity.

65% Composite Score

Managed / Growth Ready

Solid foundational controls. Critical gap: unifying siloed cloud logs with executive BI dashboards to eliminate blind spots.

Threat Telemetry & SIEM Domain 1

IT Audit & GRC Compliance Domain 2

Incident Forensics & Response Domain 3

Data Pipelines & Hygiene Domain 4

Executive Dashboards & Visualization Domain 5

Recommended Next Step

Review these results directly with DreaMarz practice leads Joanna Chishakwe (Cybersecurity) and Emmanuel Kasigazi (Data Intelligence) to receive a tailored, step-by-step remediation roadmap.

Schedule Debrief Consultation →