Assessments
Compliance and risk-based assessments to identify weaknesses and prioritize critical remediation
Find out where you actually stand
Most customers start here. An assessment measures you control by control against a recognized standard, and hands back a scored, prioritized set of findings we can help you work through.
You do not need an audit or a certification deadline to want one. Many smaller businesses come to us with no rule to satisfy at all; they simply want to know where they stand today. An assessment turns a guess into a strategy.
Compliance Assessment overview (PDF)Benefits
- Identified critical cybersecurity risks
- Optimized cybersecurity investments
- Improved regulatory compliance
Features
Compliance and risk assessed together in a single effort, rather than as two separate engagements.
- Expert-led evaluation of every in-scope cybersecurity control
- Comprehensive findings documentation, with summary and control-by-control scoring
- Detailed, risk-based recommendations
- Integrated compliance and risk assessment in one effort
Assessing AI
AI is the newest thing customers ask us to assess, and it has its own page. The AI Readiness Assessment measures your AI use against the NIST AI Risk Management Framework, and runs the same way as everything above.
Is this the same as an audit?
No. An audit is performed by an independent party against a standard you are being certified to, and its output belongs to whoever asked for it. An assessment is ours and it is for you: control by control, scored, with findings ranked by risk rather than by control number.
Which standard do you assess against?
Whichever one you are actually held to. The HIPAA Security Rule, NIST SP 800-171 for the defense supply chain, NYSDFS Part 500, or a recognized baseline where nothing specific applies yet. Working out which is part of the engagement rather than something you have to know first.
What do we have at the end?
A score, a set of findings ordered by risk, and a roadmap you can work through at a pace your people can absorb. It is also the document that answers most of what a customer questionnaire asks, which is why most customers start here.
Tell us about your business.
A half-hour conversation about what you're being asked for and where you actually stand. If we can help, you'll have a proposal usually within a day.
Not ready to talk? Check your readiness in five minutes and see where to start.