I would use FileMaker to retrieve the answers (Yes/No, 1 to 5, etc.) to about 20 to 50 questions from the client. I would build an input form for this.
Based on the answers I would let the client know where they are out of compliance with the NIST (or some other) security framework. I would produce a nice report or dashboard of their current state of compliance. FileMaker could house the security frameworks (the verbiage) for reporting and letting the client know which area(s) they are in/out of compliance with.
Is FileMaker a good application for this?
Thanks very much for all your help!