The Cyber & GRC Health Check
Three weeks. A fixed fee. A short, plain-language report that ranks what could realistically hurt your business, and a 90-day plan you can act on or walk away from.
It answers what you actually need to know
What matters?
Which systems, accounts and data the business genuinely cannot afford to lose.
What evidence exists?
What is actually in place today, and what could you show a customer or auditor.
What should happen next?
Five ranked priorities, each with an owner, a cost and a decision date.
From kickoff to decisions in 15 working days
Four stages, about 32 hours of senior work
We confirm the calendar once access and inputs are in place, so the clock never runs while we wait.
Agree scope and access
One legal entity, one Microsoft 365 tenant, up to 50 users and endpoints. We collect the inventory and confirm authorised access.
Interview and sample
Up to three stakeholder interviews. Sampled identity, endpoint, backup and governance checks, plus one existing customer questionnaire if you have one.
Rank what matters
Executive summary, risk register, top-five actions and a 90-day roadmap with effort and cost estimates.
Decide together
A 60-minute management session and the final report. You approve, defer or reject each action. One clarification round included.
- A short executive report in plain language
- Your top five risks, each with an owner, a decision and a due date
- A 90-day improvement plan with effort and cost estimates
- A management readout where you approve, defer or reject each item
Typically 50% at booking and 50% on delivery. Half the fee is credited against your first improvement project. Additional entities or larger estates are quoted separately.
What we need from you
- A business sponsor who can make decisions
- Your IT owner or IT provider contact
- Authorised, named access (never shared passwords)
- Up to three 45-minute interview slots
- Any recent customer security questionnaire
What it isn't
- Intrusive or penetration testing
- Fixing the issues we find (that is a separate, scoped project)
- Legal opinions or certification
- A free automated scan dressed up as an assessment
You leave with decisions, not a pile of findings
At the readout we show your top five priorities, explain the consequence of waiting on each, and present two scoped improvement options. We only suggest a monthly plan where there is genuinely ongoing work.
The report is yours. You can choose another provider to implement it.
Illustrative example of a ranked top-risk list.
Health Check questions
Is the Health Check free?
Will you ask for our passwords?
Do you replace our IT provider?
What does "from LKR" mean on your prices?
Book your Health Check
Tell us which system you can least afford to lose, or which customer review is coming up. We'll reply within one business day and send a one-page proposal within two working days.