Skip to content
TrustedZoneTrustedZone

Tools

Free interactive utilities for the work we do every week. Built for Australian Government cyber teams, panel responders, and SaaS vendors heading into IRAP. No login. Optional email if you want a copy of your results sent to you.

All free No tracking Email optional

Available tools

  • ISM Version Compare

    Compare any two quarterly ISM releases side-by-side. Filter by control family, classification, and Essential Eight maturity. See what was added, removed, and modified.

    Open the compare tool →

  • Essential Eight Maturity Self-Assessment

    Walk through the eight controls. Get a heatmap, a maturity score for each control, and the ISM controls that need work first. Results are shareable via URL.

    Start the self-assessment →

  • OFFICIAL / PROTECTED Classification Helper

    Describe your data, customers, and integration footprint. Get a likely classification level, the ISM profile that follows, and a five-bullet read-out for your roadmap.

    Run the classifier →

  • IRAP Scope Estimator

    indicative

    Quick form on classification target, environment, boundary size, and documentation maturity. Returns an indicative effort band and AUD fee range from our current rate card.

    Estimate the scope →

  • ISM Control Search + Cross-walk

    Search the ISM by control ID, family, or keyword. Each result shows NIST 800-53 r5 and ISO/IEC 27001:2022 equivalents. Built on the same dataset as the ISM Compare tool.

    Search controls →

How these tools work

The ISM dataset behind the Compare and Control Search tools is built from the ACSC's quarterly Information Security Manual releases. We snapshot each release as a normalised JSON file and version-control it against the previous. Historical snapshots before 2026 are best-effort parses of the published PDFs; consult the original ISM publication on cyber.gov.au for authoritative wording.

The Scope Estimator returns an indicative range, not a quote. A formal quote requires a signed mutual NDA and the prerequisites listed at the bottom of the Estimator output. The Classification Helper is a decision-tree heuristic; a definitive classification call needs the authorising officer for your system.

Found a bug? Have a tool you wish we'd build? Email harry@trustedzone.com.au.