Call us (262) 237-8358
LTS Logos Tech Systems

// Free self-assessments

Free compliance checklists: IT hygiene, NIST CSF, HIPAA, PCI DSS, GDPR, and LGPD

Six free checklists, about five minutes each. Answer 16 or 17 quick questions and get a report by email with your score and a suggested fix for every gap. No cost, no obligation.

// Pick a checklist

Six free checklists

Each one takes about five minutes. Not sure which applies to you? Start with IT Hygiene: it fits every business.

IT Hygiene
Start here
The basics every business needs

Not regulated, or not sure which rules apply? Start here. It covers the security fundamentals every business should have, whatever the industry.

  • Separate logins, MFA, and same-day account removal
  • Managed antivirus, patching, and disk encryption
  • Off-site backups with a tested restore
16 questions · about 5 minutes Check your IT hygiene About this checklist
NIST CSF 2.0
Govern, identify, protect, detect, respond, recover

The framework insurers, boards, and large customers already know, sized for a small business.

  • A named owner for security decisions
  • MFA, encryption, patching, and monitored devices
  • A written incident plan and a tested restore
HIPAA
Security Rule safeguards

For any business in the U.S. that handles patient information, from clinics to billing companies.

  • A recent risk analysis and staff training
  • Unique logins, MFA, and encryption wherever patient data lives
  • Signed BAAs and a breach-notification plan
17 questions · about 5 minutes Check your HIPAA readiness About this checklist
PCI DSS
Payment card data security

For any business that takes card payments, in person, online, or over the phone.

  • Payment devices on their own network
  • No stored card numbers, security codes, or PINs
  • The right Self-Assessment Questionnaire, done every year
GDPR
EU data protection

For any business established in the EU or serving people there, wherever the business itself is based.

  • A record of processing and a lawful basis for each activity
  • Processor agreements and valid transfers outside the EU
  • Breach reporting within 72 hours
17 questions · about 5 minutes Check your GDPR readiness About this checklist
LGPD
Brazil's data protection law

For any business handling personal data of people in Brazil, wherever the business itself is based.

  • A named Encarregado and a clear privacy notice
  • A legal basis for every processing activity
  • Incident reporting to the ANPD within 3 business days
17 questions · about 5 minutes Check your LGPD readiness About this checklist

Defense contractor? There's no free CMMC checklist yet, but we help manufacturers and contractors get ready for CMMC assessments.

Talk to us about CMMC

How it works

  1. Pick a checklist. IT Hygiene, NIST CSF 2.0, HIPAA, PCI DSS, GDPR, or LGPD. Not sure? Start with IT Hygiene.
  2. Answer 16 or 17 short questions about your own business. Each one is Yes, No, Not sure, or N/A. “Not sure” is a useful answer too.
  3. Enter your name and email. We email you a report with your score and a suggested fix for every gap.
  4. Decide what to do next. That part is up to you.

What you do with the report is your call

Fix the gaps in-house, hand the report to your current IT provider, or book a consultation and we’ll go through it with you. A copy of each report comes to us so we can follow up if you want help, but you’re under no obligation.

A self-assessment, not an audit

The results come only from your answers. Logos Tech Systems doesn’t conduct or verify the assessment, and doesn’t endorse the report unless we’ve reviewed it with you in a consultation. Think of it as a quick, honest look in the mirror before an auditor, insurer, payment processor, or customer asks for proof.

Why we give it away

Most businesses don’t know where they stand until someone asks for evidence. A free checklist gives you a head start. If you decide you want help closing the gaps, you know where to find us. For the bigger picture, see our compliance programs, or how we build private AI agents with the same security discipline.

// Questions

Common questions

Are the checklists really free?

Yes. There's no charge, and you don't have to buy anything from us afterwards.

Which checklist should I take?

If a specific law or contract applies to you, take that one: HIPAA for patient information, PCI DSS for card payments, GDPR for people in the EU, LGPD for people in Brazil, or NIST CSF for security questionnaires. If you're not sure, start with IT Hygiene. It fits every business.

What's in the report?

Your score and a suggested fix for every gap, based on your answers. It's sent to the email address you enter at the end.

What details do I have to give?

Your first name and email address, so we can send the report. Last name, phone, and company are optional.

Who else sees my results?

A copy of the report goes to Logos Tech Systems so we can follow up if you'd like help. You don't have to hire us, and the report is yours either way.

Does a good score mean we're compliant?

No. It's a self-assessment based only on your answers. Logos Tech Systems doesn't conduct or verify it, and doesn't endorse the report unless we've reviewed it with you in a consultation. Formal compliance depends on the framework and usually involves documentation, a risk analysis, or an outside assessment.

Is there a CMMC checklist?

Not yet. If you handle controlled unclassified information for a defense contract, contact us and we'll talk through your readiness directly.

// Next step

Rather talk it through?

Book a consultation and we'll go over your situation, with or without a report.