Wondering how the process works? Unsure about the time commitment? Perhaps you're worried about what you'll actually get out of this. Here's what it looks like, and what you can expect from us.
We start with a conversation about your business: what you rely on day to day, which suppliers and tools matter most, and what would hurt if something went wrong. We also talk about what you can realistically take on, so the work is shaped around your priorities and budget from the beginning. Once the work is scoped, we talk through timelines with you, so you have the most realistic picture of the time needed.
You answer a structured set of plain-English questions covering every relevant area of security, through a secure client portal or in a live session with us. Complete it in your own time, whenever suits you, or work through it together. If anything is unclear, we'll follow up with you.
We turn your answers into a scored report, written in plain language. It shows your overall security posture, how you did in each area, where the biggest gaps are and why they matter to your business. It's based on two recognised frameworks, NIST CSF 2.0 and ASD's Essentials series, so you can trust where the scores come from. We also take you through the results in a findings walkthrough call, where you can ask us anything.
The report ends with a prioritised action plan, ordered by risk and impact and grouped into what to do now, next and later. Each action is written so you or your IT provider can act on it. Depending on the level of support you choose, we can also review the tools you already own for quick wins, map your results to what cyber insurers ask for, or guide you through closing the gaps.
A clear scope and fixed price before any work starts, a straightforward assessment that fits around your business, a plain-language report with a walkthrough call, and a practical action plan you can start on straight away.
Our assessments are designed to fit around you and your business, not the other way around. You can complete the assessment yourself in your own time, whenever suits you, or we can work through it together in a live session. Choose whichever is easier and less disruptive for your day-to-day operations.
Every business works differently, so we scope the work first and give you a fixed price for each thing we'll deliver, along with a realistic view of the time it will take. You'll know the cost before we start, and you'll never get a "we need more money to finish the job" message partway through. We will never recommend work without a good reason, and if you decide to add something new, or your scope changes down the track, we agree on both the change and the price before any extra work begins.
We understand that not every business has the same budget or the same priorities, and that's fine. Our first conversation is about where you are, what you're worried about and what you can realistically take on. We shape the work around that, so you only pay for what makes sense for you right now.
Unfortunately, no assessment can promise you'll never be hit, and anyone who says otherwise is overpromising. What we do is make sure you're ready if something happens. Your report includes a clear action plan that shows where to start, and we can also write an incident response plan for you, so your team knows who to call and what to do in the first hour. We're security advisers, not an emergency response team, but if you ever need hands-on help during an incident, we'll point you to the right specialists.
We won't install or manage your systems, and we won't try to sell you tools. We will, however, give you a solid action plan to fix the issues we find, and recommend vendor-neutral tools that might help if you don't have any that do. We'll tell you what needs fixing and why, and you or your IT provider carry it out. If you don't have the capacity to do it yourself, we also offer ongoing support to keep things moving.
Try the free 10-question Security Check, or get in touch for a no-obligation conversation about whether we're the right fit.