Independent security assessment
Cybersecurity audits that turn findings into priorities
We assess your security against agreed requirements and examine how safeguards work in practice. You get independent findings, their business impact and a prioritised action plan your team can use.
Who this service is for
Find out whether your safeguards hold up
- A customer or regulator wants an independent review of your security.
- A certification, licence or regulator review is coming, and you want to check your policies and test results first.
- Earlier audit results left findings your team doesn’t know how to fix.
- You want to know whether your safeguards work in practice, not just on paper.
What the work achieves
Independent insight for better security decisions
-
See where you stand
You get an independent view of how your safeguards work, checked against the rules or standard agreed for the audit.
-
Business risks in priority order
Findings explain the potential business impact and urgency, helping you direct resources to the risks that matter most.
-
Practical recommendations for improvement
Your team understands what needs changing and the options for addressing it. We can provide further advice on remediation within an agreed scope.
-
Evidence for management and stakeholders
The report is written for its reader, whether that is your board, a customer or a regulator.
What we cover
What the audit can cover
Compliance reviews
We assess technical and organisational controls and their operation against the agreed requirements, such as NIS2, DORA or ISO 27001.
Security risk assessments
We look at what could go wrong, what it would cost your business and how well your current safeguards handle it.
Scans for known weaknesses
Where included, we scan your systems for known security weaknesses, check the results and explain the fixes.
Penetration testing
A penetration test checks how someone could break into your systems, with your permission. We add one when your audit needs it.
Supplier security reviews
We review the security policies and test reports of suppliers you rely on, and the risks their services create for you.
Readiness for an external assessment
Before a certification, licence or regulator review, we look for missing policies, supplier reviews or test results.
How it works
The audit, stage by stage
-
01
Agree why and for whom
We agree why you need the audit, what we check, who reads the report and who gives us access.
-
02
Check what happens in practice
We read your policies and records, talk to your team and run the agreed system checks.
-
03
Walk through the findings
We explain the findings to your team, ranked by risk, with the impact, the fix and how to confirm each one is closed.
- 04
Agree follow-up support
We can help plan the fixes and check them again. If the audit must stay independent, we agree limits on that help first.
What we need from your team
- A contact who can arrange access to people, documents and systems.
- Your current policies, earlier audit reports and supplier list.
- Interview time with the people who run the processes we check.
- Approval to scan or test systems, if technical checks are included.
Cybersecurity Audit & Risk Assessment
A fixed price for the agreed audit scope
The number of systems, the rules to check against, the testing depth and the readers of the report decide the price. Your proposal gives a fixed price for the agreed checks.
We agree the work and price with you in writing before we start.
Common questions
Common questions
Related services
Free 30-minute call
Plan an audit around your business needs
In a free 30-minute call, discuss your systems and the questions an audit must answer so we can recommend a useful scope.
