Cyber Health Check

Identify your cyber risks

If you are embarking on a cybersecurity improvement program, a cyber health check will help you identify your weakest security areas and recommend appropriate measures to mitigate your risks.

This health check will provide you with a concise and detailed report describing your current cyber risk status and critical exposures, and will draw on best practice, such as ISO 27001, the CIS Critical Security Controls, and ISO 22301.

Your consultant will aim to achieve the following:

• Identify cyber risks relating to people, processes, and technologies
• Identify technical vulnerabilities affecting your IT infrastructure
• Assess risks posed by employees through anonymous staff questionnaires
• Provide remediation advice for identified vulnerabilities and key risks

 Download the full service description

Scope of work

Our qualified, experienced consultants will work with you to determine how well cybersecurity is governed at board level. They will examine and report on the areas listed below, identifying any gaps and recommending specific steps to mitigate them.

Governance and information security management audit

• Cyber risk governance
• Critical cyber assets
• Asset register
• Risk register
• Legal, regulatory, and contractual requirements
• Policies and the ISMS (information security management system)
• Roles and responsibilities
• Business continuity and incident management
• Staff training and awareness
• Physical security review

Technical cybersecurity controls

• Network and perimeter security, including remote working
• Secure configuration
• Access control and privilege access
• Anti-malware
• Security monitoring
• Mobile devices, mobile working, and removable media
• Cloud security

Vulnerability scans

• External scan of up to 15 IP addresses
• One website / URL

Anonymous staff questionnaire

We will send an online questionnaire to a broad range of your staff to determine cybersecurity awareness levels, covering:

• Policies and procedures
• Social media use
• Phishing awareness
• Password management
• Malware
• Portable device use
• Handling personal information and privacy requirements
• Incident response

 Download the full service description

What to expect

We will provide you with a concise and detailed report describing your current cyber risk status and critical exposures.

The report outlines the scope, findings, and next steps to improve your cybersecurity posture. It outlines action plans, vulnerability scan findings, remediation recommendations, staff survey results, and methodology. The report also provides a prioritized action plan setting out how to mitigate the risks identified.