A 12-question diagnostic across detection, investigation, control verification and governance. Results describe process maturity and are not a legal compliance assessment or individual health assessment.