Open Security Alliance is a leading GRC consulting and advisory practice. Our free Self-Assessment Questionnaires (SAQs) help you check your current state against ISO 27001 and key RBI directions in under 10 minutes — privately, in your browser.
These Self-Assessment Questionnaires are a high-level dipstick check to establish your current state. They are not a replacement for a formal audit, CERT-In system audit or comprehensive gap assessment. Compliance or certification cannot be affirmed through self-evaluation alone — it needs evidence sampling, configuration reviews, testing and independent verification by authorised assessors.
Each questionnaire is completely standalone and mapped directly to the underlying clauses.
Global benchmark for information security management — governance, risk treatment and essential Annex A controls.
Master Direction for PA-Online, PA-Physical and PA-Cross Border — net-worth, merchant CDD, escrow discipline and cyber resilience.
Board / ITSC oversight, CISO independence, change safeguards, production hardening and 6-monthly live DR drills.
Third-party risk directions — materiality, unrestricted right-to-audit, sub-contracting chains, cloud controls and exit planning.
Choose the standard or RBI direction relevant to you. Each SAQ is fully standalone.
Rate each control as Embedded, Partial or Gap — no documents or uploads needed.
Get a live readiness index, posture verdict and your top remediation priority.
Copy an executive summary for leadership or book a session with our advisors.
Instant classification of 12 essential domains into Embedded, Partial or Gap.
Every question is mapped to its ISO clause or RBI direction chapter.
Isolates the red flags that need fixing before registrars or inspectors arrive.
The SAQ shows where you stand directionally. Formal regulatory comfort or certification needs hands-on gap closure, evidence and independent assurance — that is where Open Security Alliance steps in.
Evidence-backed evaluation across every clause and control, with a Statement of Applicability and remediation roadmap.
Mock inspections, VAPT, configuration reviews and annual cyber security audits for licensed entities.
Board-approved IT & cyber policies, ITSC agendas, CISO dashboards and escrow operating SOPs.
Clause-by-clause MSA review to add right-to-audit, sub-contracting and data-localisation safeguards.
Book a 30-minute session with a principal consultant to review your SAQ results under a mutual NDA.
