- Home
- Services
- Get compliant
- Risk Assessment
Cyber Risk Assessment & Security Posture Review
A clear, board-ready picture of your cyber risk: what you have, what threatens it, how well you are protected and which investments reduce the most risk per rupee.
Without a risk view, security spending follows the loudest vendor or the latest headline. Leadership needs priorities, not a list of 300 findings.
What we cover
Asset & data inventory
Systems, data stores, vendors and cloud services that matter to the business.
Threat modelling
Likely attackers and scenarios for your industry — ransomware, fraud, insider, supply chain.
Control assessment
Maturity scoring against NIST CSF 2.0 functions: Govern, Identify, Protect, Detect, Respond, Recover.
Third-party risk
Vendor and outsourcing review with practical contract clauses.
Risk register
Likelihood × impact scoring with owners and treatment decisions.
Roadmap
A 12-month, budget-aware plan with quick wins first.
Five clear steps, no surprises
Discover
Map data, systems, vendors and gaps.
Plan
Risk-based roadmap with owners.
Implement
Policies, controls and evidence.
Verify
Internal audit and readiness check.
Certify
Stand with you through the audit.
What you get
- Executive risk briefing
- Risk register and heat-map
- NIST CSF 2.0 maturity scorecard
- Prioritised 12-month roadmap
Pick how you'd like to work with us
Gap assessment
Two to four weeks: where you stand and a prioritised roadmap.
End-to-end programme
From gap assessment to audit-ready, with your team trained.
Virtual CISO / DPO support
Ongoing monthly support to keep evidence current.
Every engagement starts with a free scoping call and a fixed, written quote.
Where we've done this
Healthcare Forensics
Urgent AWS forensic investigation and HIPAA readiness for offshore medical server clusters.
Patient Data Protection
Security architecture and compliance auditing to protect electronic medical records and patient portals.
Enterprise Risk Advisory
Enterprise security auditing, VAPT assessments, SIEM deployment and compliance advisory for advisory networks.
Common questions
Is this the same as an audit?
Find out how an attacker sees you — before they do.
Book a free 30-minute scoping call with our security team. No sales script, just an honest view of your risk and what to do first.