Skip to content

Self-Assessment Overview⇱

The ARMOR Self-Assessment helps organizations evaluate their current offensive security maturity and identify the most practical next steps. It provides structure and consistency for measuring how offensive security contributes to detection, response, and resilience rather than serving as a one-time compliance activity.

The assessment consists of four domains, each representing a critical dimension of the ARMOR Model:

  1. Governance & Strategy
    Evaluates whether offensive security has defined objectives, executive alignment, and integration with organizational risk management.

  2. Testing Cadence & Scope
    Measures how often testing is performed, how well coverage reflects real-world attack surfaces, and whether validation extends beyond compliance requirements.

  3. Remediation & Sustainment
    Examines how findings are prioritized, tracked, and resolved, and whether improvements are maintained over time.

  4. Integration & Collaboration
    Assesses how effectively offensive security results are shared across teams, influence defensive operations, and drive continuous improvement.

Each domain contains five questions designed to reflect both tactical execution and strategic alignment. When the assessment is complete, scores are averaged across all domains to determine the overall maturity level, which maps directly to the five levels.

The results are directional, not diagnostic. They highlight where an organization stands today and where it can focus to progress meaningfully toward continuous, adaptive resilience.

To confirm the accuracy of the model, simulated results were generated across 1,000 organizations of different sizes and team structures. The distribution closely aligned with real-world maturity patterns, validating that the ARMOR Self-Assessment scales effectively from small and midsized organizations to large global enterprises.

You can complete the ARMOR Self-Assessment in several ways:

  • Online Assessment: Answer the questions interactively and instantly view your results and mapped maturity level.

    Privacy Note: Responses entered into the online assessment are processed entirely within your browser. No data is transmitted, collected, or stored. Your results remain private and accessible only to you.

  • Download the Self-Assessment Worksheet: A printable version suitable for team workshops or executive reviews.

  • Download the Full Guide: Access the complete ARMOR Model, including detailed level descriptions and guidance.