Security

Security Assessments.

A thorough review of your security posture against recognised frameworks. Where you stand today, where your gaps are, and a prioritised roadmap for closing them.

Book an assessment Back to Security

What it covers

A clear picture of where you stand.

A security assessment gives your organisation a structured, evidence-based view of its current security posture. We assess your controls, policies, and practices against recognised frameworks and produce a report that tells you honestly where you are and what to do about it.

Assessments are scoped to your organisation's size and context. We do not apply an enterprise framework to a 50-person NFP and call it done. The output is right-sized for your situation.

Frameworks we work with include: NIST CSF, ISO 27001 controls, NZISM, CIS Controls, and the Essential Eight.

Review of your current security policies and procedures
Assessment of technical controls across your environment
Identification of gaps against your chosen framework
Risk register development or review
Prioritised remediation roadmap
Executive summary suitable for board presentation
Plain-English findings with business context, not just technical detail

Common triggers

When organisations typically commission an assessment.

Before a significant technology change

Moving to a new platform, onboarding a new managed service provider, or undertaking a major infrastructure project.

Following a security incident

After a breach, phishing attack, or ransomware event, to understand what happened and prevent recurrence.

Client or regulatory requirement