Free assessment · instant results
Find out your company's maturity level in information security and data protection
Answer a guided questionnaire and instantly get your maturity level, a radar of the 14 domains and an action plan citing the standard behind each improvement.
- No credit card
- About 30 minutes
- Saves automatically
MMSI.br report
ExampleMATURITY LEVEL
3 · Defined
Overall adherence
58%
- Governance and risk72%
- Data subject rights54%
- Incident response36%
Next recommended action
Formalize and test the incident response plan
LGPD art. 48 · ISO/IEC 27001 A.5.26 · NIST RS.MA
33
Brazilian companies already assessed with the model
Built on the leading frameworks
- ISO/IEC 27001:2022
- ISO/IEC 27701
- NIST CSF 2.0
- LGPD
- GDPR
Born from a master's dissertation and validated with real companies.
What you get
A clear picture of where your company stands — and what to do first
No generic spreadsheets: results come ready-made, with charts and priorities leadership understands.
Maturity level and radar of the 14 domains
See from 1 (Initial) to 5 (Optimized) where your company stands in each domain, with a dashboard, history and progress between assessments.
Action plan backed by standards
Prioritized recommendations for each gap, citing LGPD, GDPR, ISO 27001, ISO 27701 and NIST CSF.
Market benchmark
Compare your adherence with companies in your sector and across Brazil, with percentile and domains above and below average.
Compliance with ISO 27001, NIST CSF, LGPD and GDPR
Standard-specific questionnaires with answer examples, certification readiness and regulatory exposure.
How it works
From sign-up to report in three steps
- 1
Register your organization
Enter your sector and size to compare with similar companies. It takes less than a minute.
- 2
Answer the questionnaire
80 processes across 14 domains, with a description of each level to pick the right answer. Stop and resume whenever you like.
- 3
Get results instantly
Maturity level, radar, dashboard and an executive or technical PDF, ready to present to leadership.
The model's scale
Five levels, from improvisation to continuous improvement
Each of the 80 processes is rated on this scale. The average per domain shows where to invest first.
- LEVEL 1InitialThe process is not performed, or is done on an ad hoc basis, without any documentation.
- LEVEL 2PartialThe process has started to be practiced, but in a partial, informal or incomplete way — without being fully documented.
- LEVEL 3DefinedThe process is formally documented and consistently carried out by the organization.
- LEVEL 4ManagedBeyond being documented, the process is reviewed periodically to ensure it remains effective.
- LEVEL 5OptimizedThe process is reviewed and also audited periodically, with continuous improvement based on metrics.
The 14 domains
Security and privacy assessed end to end
From governance to incident response, each domain groups processes mapped to the LGPD, the GDPR, ISO/IEC 27001 and 27701 and NIST CSF 2.0.
Explore the methodology- 01Information security governance and risk management
- 02Personal data inventory and classification
- 03Privacy and data protection policies
- 04Privacy in business processes
- 05Training and awareness
- 06Technical controls and encryption
- 07Access control and physical security
- 08Threat detection and monitoring
- 09Supply chain security
- 10Transparency and privacy notices
- 11Data subject rights
- 12Privacy by design and impact assessment
- 13Incident response and business continuity
- 14Audit and continuous improvement
Plans
Start free. Subscribe when you want more.
Answer once and see the free results right away. When you subscribe, everything unlocks without redoing the questionnaire.
Free
R$ 0
Instant results, no card
- Guided questionnaire covering the 80 processes, with autosave
- Overall maturity level and legend of the 5 levels
- Radar and adherence score for the 14 domains
- Dashboard with charts, progress between assessments and history
- PDF report (executive or technical) with detailed answers
Full plan
R$ 297 /month
Charged to your card, no lock-in — cancel anytime
- Everything in the free plan
- Compliance assessments: ISO/IEC 27001:2022, NIST CSF 2.0, LGPD and GDPR
- ISO 27001 certification readiness, NIST Tier and regulatory exposure
- Benchmark against your sector and all of Brazil
- Prioritized action plan with regulatory references
- Process-by-process answers, SWOT matrix and NIST CSF 2.0 alignment
- Spreadsheet export (CSV)
- 1-hour session with a SecExperts expert
Billed in Brazilian reais (BRL) via Mercado Pago.
Not sure which plan to choose?
FAQ
Before you start
How long does it take?
About 30 minutes. The questionnaire saves every answer automatically, so you can stop and pick up later where you left off.
Do I have to pay to see the results?
No. On the free plan you instantly get your maturity level, the radar of the 14 domains, the organization dashboard and the PDF report. No credit card required.
What does the full plan add?
You get the action plan with the regulatory reference for each recommendation, the benchmark against companies in your sector and across Brazil, the SWOT matrix, the compliance assessments (ISO 27001, NIST CSF, LGPD and GDPR) and a 1-hour session with an expert. It costs R$ 297/month (Brazilian reais), with no lock-in.
Is my data protected?
Yes. Answers are visible only to your organization, the connection is always encrypted and the benchmark uses only averages, without identifying anyone. Details are in the Privacy Policy.
Does the result replace an audit or certification?
No. MMSI.br is a self-assessment based on your answers: it shows where your company stands and where to start. For audits, certification or legal opinions, SecExperts can help with consulting.
Can I cancel anytime?
Yes, right from My account, with no fee. Access to the full plan continues until the end of the month already paid.
In 30 minutes, you'll know where your company stands
Free, no card and with instant results.