State of SupTech 2026Survey open — closes 6 November.Take part →
powered byDigital Transformation Solutions
Join a demo
Your first Pathway is free.Start free
Diagnostic pathways · Inside your agency · Any public agency

Agency Cyber & Operational Resilience

One assessment of how well your authority resists attacks and keeps serving markets and the public when anything goes wrong.

Built for: Security lead · operations lead, and the team that answers with them.

  • 120 days to answer, with your team
  • Your report, with 30 days to revise it
  • 12 months of access to the results and your Digital Twin
  • When your access ends, you can keep using GovSpace for free
  • A second pathway: $8,000
Inside the Pathway

Your whole agency cyber and operational resilience capability, assessed in one go.

Each colleague answers only what they own: tag them on their questions, watch the answers come together, and get one scored picture of where you stand and what to fix first.

2modules
71questions
2standards and frameworks
120days, with your whole team
Answer once. It carries across. When two Pathways share a module, your team answers it once and both reports use it. Tag colleagues to answer the parts they own, and every answer stays in your Digital Twin for the next Pathway.
42questions

Agency Cyber Resilience

Securing the Data Flow, Access, Devices & Premises, Governance & Policy and 9 more.

See all 12 areas we assess
  • Governance & Policy 4
  • Risk Management Framework 4
  • Protective Controls 4
  • Detection & Monitoring 4
  • Incident Response & Recovery 3
  • Third-Party & Supply Chain 2
  • Workforce & Security Awareness 2
  • AI / Agentic Cyber Risk 1
  • Security Leadership & Resources 3
  • Systems & Data Inventory 4
  • Securing the Data Flow 6
  • Access, Devices & Premises 5
29questions

Agency Operational Resilience

Resilience Governance & Important Services, Continuity & Crisis Management, People & Premises and 4 more.

See all 7 areas we assess
  • Resilience Governance & Important Services 6
  • Continuity & Crisis Management 6
  • People & Premises 4
  • Third Parties & Dependencies 3
  • Technology & Data Recovery 4
  • Automated & AI Systems Resilience 3
  • Testing, Exercises & Learning 3
Grounded in the standards you answer to
  • NIST
  • ISO 27001

Counts from the GovSpace Diagnostic question bank, October 2026.

Then, what to build or buy

The use cases that fit, matched from 163 supervisory use cases, with the solutions, vendors and peers behind each one.

What you get

A report your board can act on.
A Digital Twin that grows with you.

Sample Pathway report page: overall assessmentSample Pathway report page: at a glanceSample Pathway report cover: Central Bank of Oz Land The report

Scores, findings and a roadmap

  • Scores, and how peers answered. Your readiness scores are computed, never generated. Next to them, how peer authorities answered the State of SupTech.
  • Findings and a roadmap. Agents explain every analysis in plain language; GovSpace specialists review the report before release.
See a full sample report in a demo →
Digital Twin of a sample central bank: areas scored from G1 to G5Peer benchmark: how the institution compares with peer authorities
Your Digital Twin

A living mirror of your institution

  • Every area on one scale. Each area sits on a generation, from G1 (manual) to G5 (autonomous and adaptive), next to every other module you answer.
  • It keeps moving with you. Every module you add and every update you make feeds it: the picture keeps expanding, sharpening and staying current, until it mirrors how your institution really works. On a plan, update it as often as you like.
How the Digital Twin works →

Samples from Central Bank of Oz Land, our demonstration institution; its answers and the peer figures shown are illustrative.

After you buy

From payment to report.

01Buy

By invoice, in USD. Card payment opens later.

02Bring in colleagues

Optional: each takes the questions they know best.

03Answer

120 days from the day access opens.

04Your report

Generated when you submit, with 30 days to revise it.

05Keep it

12 months of access. Then renew for a year, or extend for 90 days.

Before you buy

Questions about this Pathway.

Who in the organization can use it?

A department buys it, but the answers, the twin and the report belong to the organization: one answer set per institution, shared with everyone you invite.

Can we pay by invoice?

Yes. Choose invoice at checkout; access opens on payment. Prices are set by World Bank income group.

What if we need more time?

A paid 90-day extension is available until 90 days after access ends.

Beyond the GovSpace Diagnostic

Looking to go further on agency cyber and operational resilience?

The Pathway shows where you stand. When you are ready to act on it, our team works with financial authorities to learn, plan and build.

LearnTraining for your team

Programs for your supervisors through the Academy and the AI Gym, on your own data and cases.

PlanStrategy and roadmap

What to build first on agency cyber and operational resilience and in what order, set against State of SupTech peers.

BuildUse cases to production

Use-case design, proofs of concept and solutions in production, built with your supervisors.

Speak to our teamHow we work →
Next step

Start free, or join the next demo.

Your first Pathway, the Readiness Baseline, is free. A demo is a standing call you join alongside other authorities.

Start freeJoin a demo →Sign in →