The necessary ones make the site work. The others measure which pages help and which ads bring the people who need DM11. Your choice, and you can revisit it from the footer.
Proposal
An assessment of your security against the CIS Controls, the reference the market uses to measure the real state. We build the inventory, check each safeguard against what is actually configured, score it with the evidence attached, and hand over the plan in the order that cuts risk fastest. It is the measurement that carries a budget request to the board, and the evidence produced here goes on to an ISO 27001 or SOC 2 project intact.
No price appears on this page. Scope does: what we do, how we run it, who runs it and what is not included. The people who read your request are the ones who will look after you, and they come back with the proposal and with time to talk it through.
Stop arguing about security from impressions. Measure it.
An assessment of your security against the CIS Controls, the reference the market uses to measure the real state. We build the inventory, check each safeguard against what is actually configured, score it with the evidence attached, and hand over the plan in the order that cuts risk fastest. It is the measurement that carries a budget request to the board, and the evidence produced here goes on to an ISO 27001 or SOC 2 project intact.
Opening assessment
A picture of the starting point. It is what progress gets measured against at the end of the period.
Asset inventory
We find out what exists before measuring anything. Almost every company discovers hardware and software here that nobody had on record, and that finding alone pays for the stage.
Control measurement
We check each safeguard against what is actually configured, not against what the policy says. Every score comes with the evidence behind it.
Maturity analysis
We compare the practice with what each discipline calls for and assign the score, with the criteria in the open.
Presentation
A meeting with the board, translating the technical finding into business risk and an investment decision.
Usually comes together with
Not a bundle, and it changes nothing you have already chosen. It is what tends to come up next, in the experience of companies that have been through this.