Cyber Health Check

Identify your cyber risks

If you are embarking on a cyber security improvement programme, a cyber health check will help you identify your weakest security areas and recommend appropriate measures to mitigate your risks. 

This health check will provide you with a concise and detailed report describing your current cyber risk status and critical exposures, and will draw on best practice, such as ISO 27001, 10 Steps to Cyber Security, CIS 20 Critical Controls, NCSC guidance and IT Governance’s practical experience to provide recommendations for reducing your cyber and compliance risks.

Scope of work

Our qualified, experienced consultants will work with you to determine how well cyber security is governed at board level. They will examine and report on the areas listed below, identifying any gaps and recommending specific steps to mitigate them.

Governance and information security management audit

• Cyber risk governance
• Critical cyber assets
• Asset register
• Risk register
• Legal, regulatory and contractual requirements
• Policies and the information security management system (ISMS)
• Roles and responsibilities
• Business continuity and incident management
• Staff training and awareness
• Physical security review

Technical cyber security controls

• Network and perimeter security
• Secure configuration
• Access control and privilege access
• Anti-malware
• Security monitoring

Vulnerability scans

• External scan of up to 15 IP addresses
• One website / URL

Staff questionnaire

We will send an online questionnaire to a broad range of your staff to determine cyber security awareness levels, covering:

• Policies and procedures
• Social media use
• Phishing awareness
• Password management
• Malware
• Portable device use
• Handling personal information
• Incident response