Technology posture assessment
A fixed diagnostic for measuring where your technology actually stands.
Forty questions across five weighted domains. Same questions, same scoring, every time. You receive a referenced scorecard you can file, forward, or hand to whoever asks.
The diagnostic
| Designation | CTO Stack Review |
| Version | CSR-1.0 |
| Domains assessed | 5 |
| Questions | 40 — 8 per domain, fixed |
| Response scale | 4-point, scored 3 to 0 |
| Median completion | 8 minutes |
| Output | Referenced 6-page scorecard, PDF |
| Cost | None |
Scope
| Domain | Weight | Basis of assessment |
|---|
Weighting reflects continuity exposure rather than effort. Security and infrastructure are treated as domains on which operations depend; a failure in either can halt trading. The weighting is stated rather than concealed so that a reader may disagree with it.
Method
Each response scores 3 to 0. Domain scores are normalised to 0–100 and combined as a weighted mean to produce the composite. The posture band derives from the composite subject to two floor rules: a domain below 40 caps the band irrespective of composite, with a lower ceiling where continuity depends on that domain; and the highest band requires every domain at 60 or above.
Where a floor rule applies, the scorecard states the composite, names the domain that set the ceiling, and gives the reason. The diagnostic does not issue a figure that contradicts its own findings.
Scorecard contents
| Cover | Reference, respondent, issue date, diagnostic version |
| 1 — Summary | Composite score, posture band, method |
| 2 — Domain assessment | Score, weight, and band for each of the five domains |
| 3 — Priority findings | Three highest-exposure findings, referenced and tagged |
| 4 — Recommended sequence | Ordered remediation steps, severity first |
| 5 — Basis and limitations | What the assessment does and does not establish |
Scorecard
| Reference | — |
| Issued | — |
| Diagnostic | CTO Stack Review · CSR-1.0 |
| Responses recorded | 40 of 40 |
Domain assessment
| Domain | Weight | Band | Score |
|---|
Priority findings
Recommended sequence
Issue scorecard
Six-page referenced scorecard
Generated in your browser and downloaded directly. Supply an address for the scorecard record.
Engagements
This assessment establishes position. Closing the findings requires artefacts and, in some cases, a second opinion. Both are available.
CTO Tech Kit
Full report against all forty findings with rationale. 90-day remediation roadmap, editable risk register, vendor RFP template, access and offboarding policy, incident response one-pager, AI use policy, and SaaS spend baseline worksheet.
Delivered by email within two business days
CTO Tech Kit + Review
The kit, plus a 60-minute review session against your findings, a recording, and a written memo. The fee credits in full toward a Tech Stack Assessment.
Kit within two business days · session scheduled on receipt