IT & Security Assessment
A written answer to three questions: what you have, who can reach it, and whether it would come back after a bad day.
What the assessment answers
Most businesses do not know exactly what they have, who can reach it, or whether it would come back after a bad day. The assessment answers those three questions for your environment, in writing.
It is the starting point for every engagement, and it is useful on its own: the findings are yours whether or not you continue with us.
What we look at
- Identity & Microsoft 365Accounts, administrator roles, multi-factor authentication, sign-in policies, mail flow and sharing settings
- Endpoints & serversWhat exists, what is patched, what is protected, and what nobody currently owns
- Network & remote accessFirewall, wireless, segmentation, VPN and anything reachable from the internet
- Backup & recoveryWhat is backed up, where it lives, whether it survives ransomware, and whether a restore has ever been tested
- Security operationsEmail security, endpoint protection, logging and who actually receives the alerts
- Vendors & accessLine-of-business software, outside providers with access, and the agreements that govern it
- DocumentationWhether the environment is written down well enough for someone else to run and recover it
- Sector obligationsThe controls your industry expects, such as HIPAA, the FTC Safeguards Rule or client confidentiality duties
Scope is set to the size of the environment. A four-person office does not need the same depth as a regulated practice under audit, and it should not pay for it.
What you receive
- Environment overviewA plain-English description of what you have and how it fits together
- Prioritized risks & gapsWhat is exposed, ranked by what would hurt the business most, not by what is easiest to sell
- Remediation roadmapWhat to fix first, what can wait, and what each step involves
We walk through the findings with you. You leave knowing where you stand and what to do next, whoever ends up doing it.
How it runs
- 1. ConversationWe talk about your business, your environment and what prompted the call
- 2. Scope & feeIf there is a fit, we agree what the assessment covers and what it costs before any work begins
- 3. DiscoveryRead-only access where possible, remote by default, on-site across Miami-Dade, Broward and Palm Beach when the problem is physical
- 4. Findings reviewWe present the overview, the risks and the roadmap, and answer questions
- 5. Your decisionRemediation, ongoing management, advisory work, or nothing further
What it is not
- Not a certification or a guarantee of compliance. It shows where you stand against the obligations that apply to you.
- Not a penetration test, unless one is explicitly scoped.
- Not a commitment. The findings stand on their own; you are not obliged to engage us for the work.
Assessment fees may be applied in full or in part to the first month of service if you proceed with an ongoing engagement. The details are in our terms.
Where the assessment leads
Findings map onto three areas of work. Most environments need some of each; the roadmap says which, and in what order.
- Managed IT & Infrastructure — taking ownership of the systems the business runs on
- Cybersecurity & Recovery — closing exposure and proving that restores work
- Architecture & Technical Leadership — the decisions about what to build, buy, migrate or replace
- Cyber insurance readiness — when a renewal questionnaire is what prompted the call
Assessments by sector
Start with a conversation
Tell us about your environment. If there is a fit, scope and fee are agreed before any work begins.
Discuss your IT