The New Assessment Experience | Cynomi Office Hours

You package it with assessment templates. Build a template once (a security baseline, a framework like CIS Controls v8.1 Implementation Group 1, or a combination of both) and apply it to every client in that tier. Good, better, and best packages become three templates. When a client matures, you switch their template and the scope updates without losing the work already completed. Learn more about the new assessment experience: https://hubs.la/Q04xhJbH0 How Do I Move From Figuring It Out Per Client to a Standard Playbook? Templates are the playbook. You can start from a system template (foundational, PCI-DSS, HIPAA, data privacy, incident readiness, cyber insurance readiness, AI use and governance) or build one from scratch by filtering the full task repository by framework and criticality. Save it once and it is available for every client. Eilon builds one live in this video in under three minutes, then explains how to structure templates by maturity tier or by vertical, whether that is SLED, K-12, higher education, law firms, healthcare, financial services, or manufacturing. How Do I Avoid Duplicating Assessment Work Across Frameworks for the Same Client? You do not reassess from zero. Adding a framework in the client settings maps it against the progress that client already has, so overlapping controls stay answered. As Eilon puts it in the demo, progress is one. That means you can add NIST CSF 2.0 to a client who started on CIS Controls and immediately see where they stand, rather than running a second assessment in parallel. What Happens When a Client Outgrows the Framework They Started On? You switch their template from the scope screen. Before anything changes, the platform shows you the current task count, the new task count, and exactly what is being added, so you can see the size of the change before you commit to it. One click applies it. This is the mid-engagement scope change that usually means rebuilding an engagement from scratch. Do I Have to Answer Every Assessment Question Manually? No. The client profile and any connected scan sources feed the assessment, and answers arrive pre-suggested with a confidence level, the reasoning behind them, and the underlying evidence. You can filter by high, medium, or low confidence, or by suggested answer, and review only what needs your judgment. Connected sources shown in this demo include the Cynomi external scan, Microsoft Secure Score, Cavelo, and CrowdStrike. If you prefer the original domain-by-domain flow, it is still there and carries the same suggestions. Who This Is For Service providers running security and compliance programs across a client base: MSPs, MSSPs, IT service providers, and consultancies. It assumes you have run an assessment before and are now trying to make that delivery repeatable across every client, at every maturity level. Speakers Eilon Bomshtein, Director of Sales Engineering, Cynomi Chapters 00:00 - When should you scope to one framework only? 03:15 - How do you template good, better, best packages? 04:35 - Which assessment templates ship built in? 07:42 - How do you build a template from scratch? 12:01 - How do you start a client from a template? 13:53 - Why fill in a client profile first? 18:23 - Which scan sources feed the assessment? 19:04 - How are assessment answers suggested automatically? 22:14 - How do you change a client's scope mid-engagement? 27:06 - How do you customize scope for one client? Learn more about Cynomi: https://cynomi.com/ About Cynomi Cynomi is the agentic Security Growth Platform for service providers, powered by CISO Intelligence, with the decision-making logic of an experienced security leader embedded into every workflow. Purpose built for MSPs, MSSPs and consultancies, Cynomi helps service providers deliver, scale, and grow cybersecurity services across every client and every maturity level. Partner with us at www.cynomi.com.