Aerospace & Defense Manufacturing calculator

Defense Cyber Assessment Gap Calculator

Summarize the evidence gaps in your defense cyber assessment ledger. Enter satisfied and unassessed counts within one declared scope, plus your internal coverage target.

What this calculator does

  • Count scoped requirements without satisfied assessment findings and distinguish completed assessments from evidence still awaiting review.

Formula used

  • Unresolved requirements = applicable − assessed satisfied
  • Assessed other requirements = applicable − satisfied − unassessed
  • Satisfied coverage = satisfied ÷ applicable × 100
  • Internal target shortfall = max(0, target − satisfied coverage)

Inputs explained

  • Assessed Satisfied Requirements: Scoped requirements with documented satisfied assessment findings.
  • Applicable Scoped Requirements: Requirements in the same approved framework version and assessment scope.
  • Unassessed Requirements: Scoped requirements whose assessment has not yet been completed.
  • Internal Satisfied Coverage Target: Your internal planning target, not an official certification threshold.

How to use the result

  • Best suited to assessment evidence Review, remediation planning.
  • This is not a NIST or DoD scoring method, certification or contractual compliance decision. Requirements are counted equally without official weighting. An internal target below 100% does not waive requirements.

Current U.S. benchmarks

  • Steel mill PPI stands at 381.162 (BLS, Aug 2026), up 23.4% from a year earlier. New factory orders are up 8.5% year over year (Census).
  • The U.S. has 11,691 transportation equipment establishments employing about 1,682,910 workers (Census County Business Patterns, 2023).

Common questions

  • Can implemented safeguards be counted as satisfied requirements? Only after the assessment has established the required satisfied findings. A claimed implementation and supported assessment evidence are different records.
  • Why are unassessed requirements counted as unresolved? They lack a documented satisfied finding. Keeping them separate shows evidence work still required rather than assuming either compliance or a completed failure assessment.
  • Is 110 the required control count for my contract? No. Enter the applicable count for your contract, framework version and assessment scope. The default is an illustrative ledger size.
  • Does meeting my internal target establish compliance? No. The target is a planning comparison. Authorized assessment, contractual criteria and any official scoring method still apply.

Last reviewed 2026-10-06.