Cybersecurity Assessments
Whether this is your first time getting serious about cybersecurity or you need ongoing executive-level security leadership, this service meets you where you are. We can start with the basics, identify the highest-risk gaps, and grow into a more mature program over time.
Where this can start and where it can go
Some clients need help understanding the basics. Others need structured oversight, reporting, and leadership. This offering is designed to cover that full range.
Getting started
- Good for businesses that have never done a formal security review
- Focus on the basics first: accounts, email, MFA, devices, backups, and core business systems
- Clear explanation of what matters now versus what can wait
- Plain-English next steps without forcing unnecessary tools
Growing into a program
- Deeper review of cloud systems, vendors, access control, policies, logging, and recovery readiness
- Prioritized remediation planning tied to actual business risk
- Help organizing security responsibilities across owners, managers, IT, and vendors
- Support for repeatable processes instead of one-time cleanup
vCISO-level support
- Security leadership without hiring a full-time executive
- Risk reviews, roadmap ownership, leadership updates, and outside coordination
- Guidance for budgets, priorities, and security decisions
- Ongoing accountability for moving the program forward
What this service can cover
The exact scope depends on your environment, but these are the common areas that usually matter first.
Core technical review
- User accounts, admin access, MFA, and password practices
- Email security, phishing exposure, and mailbox protections
- Endpoints, patching, antivirus or EDR, encryption, and local admin control
- Cloud platforms such as Microsoft 365, Google Workspace, file sharing, and SaaS tools
Operational and business review
- Critical systems, business workflows, and third-party vendor dependence
- Backup and recovery readiness
- Onboarding, offboarding, and access change processes
- Basic policy and documentation gaps that create avoidable risk
Leadership and program support
- Executive-ready summary of risk, impact, and priorities
- 30, 60, and 90-day action plan
- Recurring review cadence if you want continued support
- Optional coordination with your IT provider, internal staff, or vendors
Typical engagement levels
You do not need to buy the largest package on day one. A smaller assessment can stand on its own or become the starting point for a longer-term relationship.
Foundational assessment
Best for organizations that want a first pass on the biggest risks and the most practical improvements.
- Starting at $1,500
- Focused review of key systems and major risk areas
- Plain-English findings and action plan
Expanded assessment
Best for businesses with more users, more systems, compliance pressure, or a need for deeper planning.
- Broader review across people, process, and technology
- Higher-detail findings and remediation priorities
- Can include policy, vendor, and governance review
Recurring advisory or vCISO
Best for companies that want continuing leadership, accountability, and decision support without hiring full-time security leadership.
- Monthly or recurring engagement
- Roadmap ownership and leadership reporting
- Security strategy support and outside coordination
Not sure where you fit?
That is fine. Start with a conversation and we can decide whether you need a first-time assessment, a deeper review, or ongoing vCISO support.
Planning note
Start with the free intro call for a general discussion. Use the Overview request when you want to provide more detail up front. If deeper review could involve protected health information, regulated data, or live system access, the right agreements can be put in place before moving into that phase.