Tracks
Four tracks. One readiness framework.
Pick the track that matches your role and seniority. Each NCRA assessment uses a consistent scoring approach designed to support meaningful comparison as the evidence base grows.
Students · early-career
Foundational
Establish core cybersecurity literacy and ethical foundations.
- Duration
- 35 min
- Items
- 60
- Threat landscape & terminology
- Network & system fundamentals
- Cyber hygiene & ethics
- Intro to risk and governance
Working professionals
Professional
Validate applied skills across mainstream security operations and engineering.
- Duration
- 60 min
- Items
- 90
- Identity, access & cloud security
- Vulnerability & patch management
- AppSec fundamentals
- Incident triage workflow
Domain experts
Specialist
Deep capability checks per specialisation — SOC, AppSec, GRC, Cloud, IR, OT.
- Duration
- 90 min
- Items
- 120
- Scenario-based reasoning
- Tooling proficiency
- Architecture & design review
- Standards mapping
Organisations & gov
Enterprise
Workforce-wide capability mapping with cohort dashboards and remediation planning.
- Duration
- Cohort assessment
- Items
- Custom
- Organisation readiness score
- Role-level gap analysis
- Pathway recommendations
- Auditor-ready reports
Eleven domains, mapped to the work people actually do.
Governance & Risk
Identity & Access
Network Security
Endpoint & Cloud
Application Security
Data Protection
Threat Detection
Incident Response
OT & IoT Security
Privacy & Compliance
Secure Development
Cyber readiness is not a one-time test. It is a continuous capability.
NCRA is building the framework to measure it, understand it and strengthen it.