Audits & Assessments

The 1-Day NIST Cyber Health Check is a fixed, low-cost, focussed assessment to determine your organisation's cybersecurity health and readiness to respond to cyber-attacks.  

In this cybersecurity audit, we take a cursory look at the threats, vulnerabilities and risks your organisation faces and conduct a compact review of related materials including policies, processes and procedures.

Summary:

• Output: 1-2 page summary report highlighting your strengths and areas that need further investigation and improvement. The report also highlights opportunities for technology consolidation and areas for potential savings.
• Constraints: Extremely time-limited engagement. Stakeholder availability.
• Requirements: Access to key stakeholders.
• Dependencies: Third Party, if applicable.
• Number of days: Less than a day. Maximum of 4 hours for the assessment.

A focussed audit aimed at answering one critical question. ‘Is my team breach ready?’

This assessment scores the Breach Readiness capability of a specific group of people (or an existing team) and how they respond to a specific cyber-attack scenario against a distinct critical asset.

This audit is performed in conjunction with and during our Cyber Crisis Tabletop Exercise (CCTE) and it measures and scores various attributes of the exercise and the participants during the tabletop exercise.

Summary:

• Output: Formal report with a Breach Readiness score along with formal scoring of several other categories.
• Constraints: Scenario and asset-based
• Requirements: Tabletop exercise facilitated by Cyber Management Alliance
• Dependencies: Cyber Crisis Tabletop Exercise (CCTE)
• Number of days:  3+ days

A focussed assessment during which we evaluate the maturity of your SIEM or Security Incident and Event Management system and review the operational aspects of the SoC team.  This assessment includes an overview of the monitoring technology stack. (see Technology Stack).

Summary:

• Output: A status and improvement report.
• Context: IDS, IPS, EDR, Malware Detection, SIEM, Log Management, Incident Response playbooks.
• Requirements: Access to staff, documentation and technology stack.
• Dependencies: Third Party, if applicable.
• Number of days: 4+ days

(Cyber Resilience Maturity Audit) 

This comprehensive, no-holds barred assessment, provides a 360-degree view of your organisation’s cyber incident response and crisis readiness. We don’t just interview stakeholders, we scrutinise each and every in-scope artefact and insist on supporting evidence for each item. 

In its entirety, this assessment includes our Breach Readiness Audit, SOC Assessment and additional micro-assessments including an assessment of the Technology Stack and the Visibility Coverage.

Put another way, this is a bespoke assessment where the client selects the aspects to be evaluated and appraised based on their organisational size and other requirements.

Summary:

• Output: Detailed and formal report that deep dives into all the areas highlighting your strengths and weaknesses. This report also provides detailed remediation guidance.
• Context: Several. Depending on the complexity and choice of assessments.
• Requirements: Access to staff, documentation and technology stack.
• Dependencies: 3rd Party, if applicable.
• Number of days: 8+ days