Privacy Policy

The short version

Who we are

CISScore (cisscore.com.au) is a cybersecurity assessment tool operated by CyberPosture that helps small and medium businesses understand and improve their security posture against the CIS Controls v8.1 Implementation Group 1 framework.

Not affiliated with the Center for Internet Security®. CIS Controls® is a registered trademark of CIS.

Taking the assessment

While you answer the questions, your answers stay in your browser (localStorage). No account is needed and you can stop at any time. We record anonymous page views (which pages are visited, roughly where in the world from, no names, no tracking cookies) on our own server in Australia using self-hosted Umami.

Getting your results

To see your score and receive your results, you provide your name, business name and email address (phone is optional), and you agree to the sharing described in the next section. Sharing with Cyber83 is a condition of using the free assessment. At that point we collect and store:

• Your name, business name and email address, and your phone number if you entered one
• Your overall score and your score for each control assessed
• Your answers to the assessment questions
• The date and time you gave consent, and the version of the consent wording you saw

We email your results and a short follow-up sequence. Every email has a working unsubscribe (reply with "unsubscribe"), and replying reaches a person.

Sharing with Cyber83 Australia

CISScore is built by the team behind Cyber83 Australia (cyber83.com), a managed security services provider. When you submit the results step, your name, business name, email, phone (if given), score, breakdown and answers are sent to Cyber83's APAC team, together with the time you gave consent. Cyber83 may contact you about remediation and improving your score. Cyber83 handles that information under its own privacy policy. We do not share your information with anyone else for marketing.

You can opt out of Cyber83 contact at any time by replying "unsubscribe" to any email or emailing support@cisscore.com.au. When you ask, we remove your record and ask Cyber83 to delete its copy.

If you buy a document

We additionally collect and use:

• The business details you enter on the generation form
• Payment details, handled entirely by Stripe. We never see your card number

Your generated document is stored on our server so you can download it again.

Where your data is handled

Your stored results, generated documents and our analytics are held on our own server in Australia.

Three parts of the service use specialist providers that operate overseas: document generation and payment processing (United States) and email delivery (Japan). Each one only receives what it needs to do that job, and only uses it to provide the service to us.

Opting out and deleting your data

Email support@cisscore.com.au and we will delete your record, including your contact details, stored results, answers and any generated documents, and ask Cyber83 to delete its copy. Clearing your browser storage removes the local copy of your answers at any time.

Your rights

Under the Australian Privacy Act 1988, you have the right to access, correct, and delete personal information we hold about you, including asking us to have Cyber83 delete it. You can opt out of follow-up emails at any time.

To exercise these rights, email support@cyberposture.com.au

Contact

Questions? support@cyberposture.com.au