A general readiness baseline across the areas that matter most: ownership, access control, detection, incident response, vendor risk, training and compliance posture.