What does this check do?

With forty questions and no registration, it gives you the eligibility traffic light, a first picture of your cloud and cybersecurity starting point in the five decree categories, the estimated grant on your spending plan and the application checklist. The result stays online through a personal link you receive by email.

Is the result an official answer?

No. The tool applies the rules of the decree and the ministry FAQ and tells you what to check; eligibility and the grant are decided by the Ministry when it reviews the application. The starting point is then confirmed in AtWorkStudio's offer, which under FAQ 48 must describe it together with the guaranteed improvement.

What happens after I complete it?

You receive the personal link to your results by email and, if you wish, you request AtWorkStudio's offer with one click from the same page: AtWorkStudio replies in writing with a proposal in the format the decree requires. No commitment, and you can delete your data whenever you want.

What is the NIST Cybersecurity Framework 2.0?

The NIST CSF 2.0 is the international reference standard for cyber risk management, published by the National Institute of Standards and Technology (USA). It covers 6 functions: Govern, Identify, Protect, Detect, Respond and Recover, with 22 categories and 106 subcategories.

How much does the assessment cost?

The assessment is completely free. No cost, no commitment. You receive your score right after completing it.

How long does the questionnaire take?

The questionnaire has 106 questions across the six functions of the NIST CSF 2.0. The score arrives right after submission, also by email.

Yes, data is processed in compliance with the GDPR. You can delete it at any time with one click from the results page. The service is run by AtWorkStudio, an ISO/IEC 27001 certified company.

Who is the NIST assessment for?

The assessment is designed for executives and managers. The questions are in Italian, English and German, in clear language accessible even without specific technical skills.

MIMIT 2026 Voucher check and NIST CSF 2.0 Assessment

Two free tools

The voucher has a deadline, security doesn’t.

That is why the MIMIT 2026 Voucher comes first: the check you need now to apply. The NIST CSF 2.0 assessment remains the way to measure your organisation’s cyber maturity, today and over time. Both without registration, with a personal link by email and instant results.

MIMIT 2026 Cloud and Cybersecurity Voucher

Applications from 20 October 2026

Check the requirements and prepare your starting point

For those applying: eligibility requirements, cloud and security starting point across the decree categories, spending plan with estimated grant. The result is the basis for the approved supplier’s offer.

Grant: 50%, up to €20,000
Questions: 40
Languages: Italian, English, German
Result: Requirements, grant, starting point

Check the requirements The scheme on the AtWorkStudio site

NIST CSF 2.0 Assessment

Measure your organisation’s cyber maturity

To understand how protected you are: 106 plain-language questions on the six framework functions, overall and per-function score, evaluation with priorities on request.

Questions: 106
Functions: 6, with 22 categories
Languages: Italian, English, German
Result: Score per function and report

Start the NIST assessment What is the NIST CSF 2.0

How the voucher check works

Three steps, and you know whether and how to apply.

The decree asks you to declare how your business stands today in cloud and security and what you will improve with the grant. The check takes you exactly there.

Step 1 · requirements

Eligibility traffic light

SME or VAT number, 30 Mbps connectivity, DURC, catastrophic risk insurance, digital identity and de minimis: what is in order and what to check before 20 October.

Step 2 · starting point

Snapshot of cloud and security

For the five decree categories you state what is in use, partial or absent: the description the application and the supplier’s offer require.

Step 3 · spending plan

Estimated grant

Enter the amounts per category: the tool applies the scheme rules (minimum €4,000, services within 30%) and estimates the grant, up to €20,000.

20 October 2026, 12:00: Application drafting opens on the MIMIT procedure
10 November 2026, 12:00: Submission opens: chronological order counts
20 January 2027, 12:00: The window closes, unless funds run out earlier

Check the requirements All about the scheme

NIST CSF 2.0 Assessment · Cyber maturity

Why measure cyber maturity?

The NIST CSF 2.0 is the world’s leading standard for cyber risk management, adopted by organizations of every size. The assessment is free, with no commitment, and designed for executives and managers: clear, accessible questions, even without specific technical expertise. Your data is processed in compliance with GDPR and you can delete it at any time with a single click.

106 questions on the NIST CSF 2.0

Guided multiple-choice questions on security processes, roles and controls. No technical data to enter: whoever knows the company can answer.

Instant report

Your cyber maturity score, overall and per function, arrives right after submission, also by email.

6 functions, one score each

Govern, Identify, Protect, Detect, Respond, Recover: the six framework functions, each with a dedicated score plus the overall score.

How the NIST assessment works

Three steps to a snapshot of your security.

The tool is free and confidential: complete it when you like, get the result immediately and decide how to proceed.

Step 1 · 106 questions

Complete the questionnaire

Answer 106 questions across the 6 functions of the NIST CSF 2.0: Govern, Identify, Protect, Detect, Respond, Recover.

Step 2 · instantly

Receive your score

Instantly get your cybersecurity score, both overall and for each functional area, delivered directly via email.

Step 3 · if you wish

Improve your security

Identify critical areas and priorities for action. AtWorkStudio can support you on the improvement journey.

Start the free assessment What is the NIST CSF 2.0

What the NIST assessment measures

The 6 NIST CSF 2.0 functions

The framework covers the entire cyber risk management lifecycle: for each function the report shows your level.

Govern

Cybersecurity strategy, policy and organizational oversight.

Identify

Understanding assets, risks and the organizational context.

Protect

Access controls, training, data protection and platform security.

Detect

Continuous monitoring and security event analysis.

Respond

Management, analysis and mitigation of security incidents.

Recover

Service restoration and communication after an incident.

A service by AtWorkStudio

Start with the voucher. Continue with security.

These tools are developed and managed by AtWorkStudio, MIMIT approved supplier (code VCCFA2600000145) for every voucher category and a company certified ISO/IEC 27001, ISO 9001, ISO/IEC 27017 and 27018 and compliant with ISO/IEC 20000-1. AtWorkStudio offers specialized consulting in cybersecurity, NIS2 Directive compliance, IT service management and international certification support.

Voucher check in forty questions, NIST assessment in one hundred and six: instant results, no registration.

Check the voucher NIST CSF 2.0 Assessment

Find out more about AtWorkStudio

Up to €20,000 in non-repayable grants.Ready to apply?