CUP FIELD TOOLS

Bring evidence to the decision.

Choose one practical review, define its scope and turn unanswered questions into an action plan with owners and dates. Each worksheet explains when to use it and includes a fictional example.

Free, no registration. Entries stay in your browser; use non-sensitive references, review exports before sharing and read the data notice on each tool. Progress records your entries, not a security score or compliance verdict.

OT remote access →

Review one supplier connection and identify missing access, isolation and recovery evidence.

12 chapters · 36 detailed verifications · Worked example · Portable review files

SBOM & VEX →

Review one product-component-vulnerability claim and the evidence behind the response.

12 chapters · 36 detailed verifications · Worked example · Portable review files

Automotive cybersecurity & updates →

Review one vehicle change or software update. Bring engineering evidence, cybersecurity management and software-update responsibilities into one scoped review before the authorised team decides the next step.

12 chapters · 37 detailed verifications · Worked example · Portable review files

IEC 62443 system assurance →

Review one industrial system or change, with a defined operational boundary. Identify which requirements and responsibilities apply, then connect the installed configuration to evidence and open actions.

12 chapters · 36 detailed verifications · Worked example · Portable review files

CRA product readiness →

Review one product and market activity under the Cyber Resilience Act. Establish scope and responsibilities, then identify gaps in product security, vulnerability handling, reporting readiness and the supporting dossier.

12 chapters · 37 detailed verifications · Worked example · Portable review files

AI Act use-case review →

Review one AI system in one intended use. Establish the organisation’s role and the applicable pathway, then assemble the evidence needed for a controlled deployment decision.

12 chapters · 36 detailed verifications · Worked example · Portable review files