Cyber Health Check

Identify your cyber risks

If you are embarking on a cyber security improvement programme, a cyber health check will help you identify your weakest security areas and recommend appropriate measures to mitigate your risks.

This health check will provide you with a concise and detailed report describing your current cyber risk status and critical exposures, and will draw on best practice, such as ISO 27001, ISO 22301, 10 Steps to Cyber Security, CIS Critical Controls and NCSC (National Cyber Security Centre) guidance to provide recommendations for reducing your cyber and compliance risk. Your consultant will aim to achieve the following:

• Identify cyber risks relating to people, processes and technologies.
• Identify technical vulnerabilities affecting your IT infrastructure.
• Assess risks posed by employees through anonymous staff questionnaires.
• Provide remediation advice for identified vulnerabilities and key risks.

 Download the full service description

Scope of work

Our qualified, experienced consultants will work with you to determine how well cyber security is governed at board level. They will examine and report on the areas listed below, identifying any gaps and recommending specific steps to mitigate them.

Governance and information security management audit

• Cyber risk governance
• Critical cyber assets
• Asset register
• Risk register
• Legal, regulatory and contractual requirements
• Policies and the ISMS (information security management system)
• Roles and responsibilities
• Business continuity and incident management
• Staff training and awareness
• Physical security review

Technical cyber security controls

• Network and perimeter security, including remote working
• Secure configuration
• Access control and privilege access
• Anti-malware
• Security monitoring
• Mobile devices, mobile working and removable media
• Cloud security

Vulnerability scans

• External scan of up to 15 IP addresses
• One website/URL

Anonymous staff questionnaire

We will send an online questionnaire to a broad range of your staff to determine cyber security awareness levels, covering:

• Policies and procedures
• Social media use
• Phishing awareness
• Password management
• Malware
• Portable device use
• Handling personal information and privacy requirements
• Incident response

 Download the full service description

What to expect

We will provide you with a concise and detailed report describing your current cyber risk status and critical exposures, and will draw on industry best practice.

The report outlines the scope, findings and next steps to improve your cyber security posture. It also outlines action plans, vulnerability scan findings and recommendations, staff survey results and methodology.

 Download Cyber Health Check Sample Report