Security Risk Assessments

We assess your controls against a recognized framework and give you a plain reading of the results. Instead of a percentage score, you get a control-by-control list of what's in place and what isn't, with the reasoning attached.

Then we help you answer the questionnaire accurately. Where the true answer is no, we'd sooner fix the gap than help you word around it, because an inaccurate answer on a cyber policy can surface when you file a claim. Our post on what your cyber insurance application is really asking covers the questions insurers ask most.

You also get a prioritized plan. Not every gap matters equally, and spending first on the wrong thing is the most common way this budget gets wasted.

The gaps are often basic. In The Firewall That Was Never Plugged In, a local government had answered yes to the firewall question for years without knowing the device had never been connected. Assessments are part of our compliance services, and regulated businesses can take the work further with CMMC readiness or HIPAA compliance.