Training, exams and certification
Training, exams and certification
An assessment ends with a score; an audit asks for documents. The hub now turns the answers into Word drafts and adds an optional risk register based on the NIST SP 800-30 method.
Reviewed by GoToCertify’s Subject Matter Expert ·
Document drafts. Every assessment produces a gap treatment plan with actions, missing evidence, owners and due dates. Most assessments add a register of the documents the law or the standard requires, with their status taken from the answers, and templates to complete: the record of processing, the breach record and the DPIA for the GDPR; the AI system inventory and the fundamental rights impact assessment for the AI Act; the ICT contract checklist and the major incident record for DORA; the incident notification forms for NIS2; scope statements and management review minutes for the ISO management systems; the security risk analysis report for HIPAA; the Organizational Profile for NIST CSF 2.0.
Risk register. For the assessments mapped to ISO/IEC 27001, an optional section lists 26 threats. Likelihood and impact are rated on five levels and the level of risk follows the combination table of NIST SP 800-30 Rev. 1. Next to each threat the tool shows how the related controls score in the assessment, and it produces a risk assessment and treatment report.
All documents are drafts generated from a self-assessment, to be reviewed, completed and approved: they are not evidence of compliance. They are created in the browser, and nothing is sent to our servers.
Nothing is sent to our servers: the answers stay in the browser, and you can download a save file to resume later or share with colleagues.
Free and paid: The questionnaires, the dashboard with the overall score and the score by area, and a summary PDF remain free, with no account. Document drafts and the risk register are part of what unlocking adds. Unlocking one assessment costs €18 including VAT for 45 days, with no subscription; GoToCertify Pro unlocks every assessment for €39, and whoever has already unlocked single assessments pays only the difference. Unlocking adds compliance guidance on every requirement, the full action plan, the detailed dashboard (by source, by control and gaps by area), the full PDF report with your logo, the evidence tracker, comparison with a previous baseline, the Excel export and Word document drafts pre-filled from the answers; the cross-framework view is included in Pro. The access link arrives by email after payment through Stripe.
Compliance, security and privacy teams, consultants and auditors who need to leave an assessment with something to hand to management, a customer or an auditor.
The assessment is part of the GoToCertify Compliance Self-Assessment Hub, which also covers the EU AI Act, the GDPR, NIS2, DORA.
Word-compatible files that also open in LibreOffice and Pages, plus the Statement of Applicability and the data export in Excel.
No. They provide the structure, the references and the status taken from your answers; the policy text and the risks specific to your organisation are yours to write.
They are included when an assessment is unlocked: 18 euro including VAT for 45 days for one assessment, or 39 euro for every assessment with GoToCertify Pro.
Start any assessment for free; unlock it when you need the documents.
Open the Compliance Self-Assessment Hub
BITIL.COM is an ATO (Accredited Training Organization) and an AEO (Approved Examination Organization) of PeopleCert. PRINCE2® and PRINCE2 Agile® are registered trade marks of PeopleCert.
