Assessments

1. Baseline: assess against the framework that applies to you
2. Plan: a prioritized list of fixes, each with an owner and a date
3. Fix: we handle the technical items as part of your agreement
4. Rescore: progress measured every quarter

What we assess

We measure your organization against the framework that applies to you, such as HIPAA, the FTC Safeguards Rule, GLBA, CJIS, NIST or CIS, covering both written policies and the technical controls behind them.

How it works

• Interviews: short conversations with leadership and key staff.
• Technical review: scans and configuration checks of your network, servers, Microsoft 365 and security tools.
• Documentation review: your existing policies, plans and records.
• Report: a score, the gaps in plain language, and a prioritized plan with an owner and a date for each item.

Frequently asked questions

How long does an assessment take?

Most take a few weeks from kickoff to report, depending on the size of your organization and the framework.

Will it disrupt our staff?

Very little. Interviews are short and the technical work happens in the background.

What do we need to provide?

Access to the right people, any existing policies, and administrator access to your systems if we do not already manage them.

What does it cost?

Each assessment is quoted as a fixed price before we start.