An audit is coming and the documentation is thin
What we do
Security controls documented, with the policies, procedures and evidence auditors typically ask for.
02 / 06Cybersecurity
Know where you are exposed, and fix it in order.
Risk assessment, network and data protection, incident response and security awareness training. We start by finding out what is actually there, then fix the highest risks first.
What is included
The exact scope is agreed in writing after the assessment. These are the parts most engagements cover.
01
Risk assessment
An inventory of systems, data and access, ranked by business impact rather than by tool.
02
Network protection
Firewall, segmentation and secure remote access configured and documented.
03
Endpoint and data protection
Endpoint security, encryption and controls on where sensitive data can go.
04
Identity and access
Multi-factor authentication, periodic access reviews and a written offboarding procedure.
05
Incident response
A written playbook, containment when something happens, and a report afterwards.
06
Awareness training
Phishing simulations and short sessions so staff recognise what to report.
When companies call us
A phishing or ransomware incident, or a near miss
What we do
Containment first, then a written account of what happened and what changes to prevent it.
Former employees may still have access
What we do
An access review across systems, followed by an offboarding procedure that is actually followed.
What you receive
Written deliverables, so the work is visible to management and stays with your company if you ever leave.
Risk register with priorities
Remediation plan with owners and dates
Policies and procedures ready for audit
Post-incident report after every incident
How an engagement runs
The same three steps for every service line, whether you contract one line or several.
01
Initial assessment
Half a day at your site, free. We map the current state and send the initial findings in writing.
02
Scope and proposal
A written scope with deliverables, timeline, and SLA targets where the service is ongoing.
03
Delivery and reporting
Weekly progress reports during projects, monthly reports for ongoing services. One account owner throughout.
Combine lines under one contract, one SLA and one account owner.
Managed service and IT operationsCloud computingDigital transformationSoftware developmentData analytics and business intelligence
Each line can also be contracted on its own. When a contract ends, all documentation, credentials and configurations are handed over in full.
Start with half a day at your site.
A consultant replies within one business day. The initial findings come in writing, with no obligation to continue.
Request a free initial assessment