Access review
Who has access to what, including leavers, admin rights and shared accounts.
Service 04 / 12Cyber security
Cyber security
audits.
An independent check of the controls you already have. We compare what is configured, what is written down and what actually happens day to day, then show you where they differ.
Last reviewed
What it is,
and why it matters.
Policies and settings drift over time. People leave but keep access, firewall rules pile up, and documents describe processes nobody follows any more. An audit finds those gaps.
We review your controls against good practice and any standard you work to, then give you clear findings and evidence you can share with clients, insurers and auditors.
A good fit if…
- Clients or insurers ask for evidence of your security
- You have never had an independent review
- You have changed IT provider or grown quickly
- You are preparing for ISO 27001 or a regulatory review
Everything you need,
nothing you don't.
Network security audit
Firewall rules, segmentation, remote access and wireless setup.
Configuration review
Servers, laptops, Microsoft 365 or Google Workspace settings.
Policy and process review
Whether documents match what people actually do.
Backup and recovery check
Whether backups exist, are protected, and can be restored.
Audit report
Findings, evidence and recommendations in a clear, shareable format.
Four clear
steps.
- Step 1
Plan
Agree the scope and any standard to audit against.
- Step 2
Review
Examine settings, records and documents.
- Step 3
Verify
Interview staff and sample real activity.
- Step 4
Report
Findings, evidence and recommended fixes.
Audit types
A
IT security audit
A broad review of your IT controls, accounts, devices and cloud services.
B
Network security audit
A focused review of firewalls, network design and remote access.
C
Cloud and Microsoft 365 audit
Security settings, sharing and identity configuration in your cloud tenancy.
D
Compliance audit
A review against a specific standard such as ISO 27001, Cyber Essentials or PCI DSS.
What affects
the cost.
1
Scope
A focused network audit is quicker than a full IT security audit.
2
Standards
Auditing against a formal standard adds evidence gathering.
3
Sites and systems
The number of locations, networks and platforms involved.
4
Reporting needs
Whether the report needs to be shared with third parties.
Every audit is quoted at a fixed price once the scope is agreed.
Get a quoteQuestions,
answered.
It is an independent review of your security controls, checking that they are set up correctly, documented and working as intended.
An assessment looks at risk and what could go wrong. An audit checks your existing controls against a defined standard or policy and records the evidence.
Once a year is a sensible baseline, with additional reviews after major changes such as a new IT provider or office move.
Yes. The report includes a summary suitable for sharing with clients, insurers or auditors.
Next stepLet's talk about
Let's talk about
security audits.
A short call, no obligation. We'll listen, ask a few questions and suggest a sensible first step.
ContactStart with
Start with
an assessment.
Tell us a little about your business. We'll arrange a short, no-obligation conversation and suggest a sensible first step.
Studio
The Leather Market
London Bridge