Security Audits & Assessments
An independent review of your security, with a clear picture of the risks and what takes priority.
Security assessment
We map your organisation's security through a combination of technical verification, a vulnerability scan, observation and interviews. This covers technical, physical and organisational controls.
Our starting point is the principles of Defence in Depth and Zero Trust. Depending on the agreed scope, every layer of security can be included.
Tailored or framework-based
The assessment is tailored to your organisation. If you want to measure against ISO/IEC 27001 or CyberFundamentals (CyFun®), the framework for NIS2, we align it with those requirements. It can also be part of a compliance programme that is already under way.
Report and debrief
You receive a detailed report with appendices containing supporting detail. Each finding gets a risk rating based on impact and likelihood, together with a recommendation. Improvements that can be made quickly are marked as quick wins.
A management summary with a visual security index gives leadership the overview. We discuss the results technically with the IT lead and separately with management.
Duration and repetition
For an SME, an assessment typically takes 3 to 5 days, including report and debrief, depending on size.
An assessment is a snapshot in time, so we recommend repeating it every year or every two years. The results form the basis for a roadmap.
Internal ISO 27001 audit
If your organisation runs an ISMS based on ISO/IEC 27001, we can carry out the internal audit, including in preparation for the certification audit.