CyberIndex is a standards-aligned maturity assessment across 20 domains. It produces weighted scores, a colour heatmap, and a board-ready roadmap, so leaders can prioritise fixes, justify investment, and protect commercial momentum.
The ApexIQ CyberIndex is a proprietary cybersecurity maturity assessment developed by Apex Edge Sales Engineering Limited to provide a standards-aligned baseline across multiple domains. This document forms part of ApexIQ CyberIndex and is provided under the ApexIQ CyberIndex Free Use Licence v20251001 (Non-Commercial). The full licence appears in the ApexIQ CyberIndex Free Use Licence document. ApexIQ and ApexIQ CyberIndex are proprietary marks of Apex Edge Sales Engineering Limited. All rights reserved.
Use and share unmodified copies internally with clear attribution. No rebranding, alteration, resale, external redistribution, machine-learning training, or public benchmarking.
Not an audit or certification; use with qualified security oversight.
Fragmented security obscures real risk and delays confident decisions that move revenue.
CIO, CISO, CTO, COO, CRO, risk committee, operational leaders.
Board-ready visibility, prioritised fixes, and aligned spend inside 90 days.
Senior technology and commercial leadership teams who need a defensible baseline and clear priorities.
You need an objective baseline for the board.
Audits, incidents, or customer diligence expose gaps.
Investment planning demands clear priorities and measurable outcomes.
Standards-aligned baseline across 20 domains (scored 1–5).
Weighted heatmap of exposure (so you fix what matters most first).
Domain scorecards with strengths, gaps, and dependencies.
Board-ready roadmap (prioritised, time-phased, with owners).
Simple governance and tracking approach for reassessment and reporting.
Governance and management — accountability and auditable execution.
Risk management — controls that reduce likelihood and impact.
Identity and access management — access and privilege discipline.
Data protection and security — safeguards and compliance posture.
Security operations — detection and response effectiveness.
Incident response — playbooks, roles, communications, recovery.
Full model covers 20 domains, with 12 core questions per domain.
Responses are scored 1–5 (Non-existent → Optimised), with weightings by business criticality.
Scope and context — objectives, critical assets, regulatory exposure, business priorities.
Assessment — answer the question set per domain and capture evidence.
Heatmap and analysis — weighted scores, strengths, gaps, dependencies.
Board-ready roadmap — prioritised plan with owners, milestones, and indicative KPIs.
Governance and tracking — simple dashboards for reviews and transparent reporting.
Continuous improvement — set targets per domain and reassess periodically.
Apply for access (Licensed Free to Use, Non-Commercial).
Complete the questionnaire at your pace.
Review the baseline heatmap and gap areas.
Turn outputs into a prioritised roadmap to close risk areas.
Certification, audit, pen testing, or a compliance stamp. It’s a practical scaffold to improve decisions fast and protect commercial trust.
Informational tool only, not an audit, certification, pen test, or professional advice. Use with qualified security oversight. Unmodified internal copies only; no public benchmarking without prior written consent.
Is this a substitute for an audit or pen test?
No. Use alongside assurance activities and qualified oversight.
What do we get?
A heatmap and gaps list you can turn into a prioritised improvement roadmap.
Who sees our data?
You control your data. If you request help, share only what you choose. We may use anonymised insights to improve the model.
Will you publish results?
Only anonymised insights, and only with your consent.
Are you cybersecurity experts?
No. We’re outcome-based GTM practitioners. CyberIndex is a standards-aligned scaffold built during a focused learning and development period.