Small Business Cybersecurity Baseline Review

Description

Identify practical security improvements

This fixed-scope package provides a baseline review of common cybersecurity controls for one small-business environment containing up to five users and five Windows or macOS computers.

What is included

• Pre-review questionnaire covering the business environment and main concerns
• Review of agreed account and administrator-access practices
• Review of multi-factor authentication availability and current use
• Review of operating-system and application update practices
• Review of built-in endpoint-protection and firewall status
• Review of file-sharing and remote-work practices at a baseline level
• Review of stated backup arrangements
• Prioritised written findings and recommended next actions
• One remote follow-up session of up to 45 minutes to discuss the report

Delivery process

1. We normally contact you within two business days after accepting the order.
2. We confirm the scope, obtain authorization and agree a safe access method.
3. The customer provides the completed questionnaire and required access or evidence.
4. We target delivery of the written report within ten business days after receiving all required information and access.
5. The follow-up session is scheduled by mutual availability.

Customer requirements

• Ownership of, or written authority over, every account and device reviewed
• Accurate information about the users, systems and existing controls
• Temporary least-privilege access or supervised screen sharing where access is required
• A current backup before any separately approved configuration change

Not included

• Penetration testing, exploitation, intrusive scanning or social-engineering tests
• Formal compliance certification or legal interpretation of GDPR, NIS2 or another framework
• Incident response, malware removal or forensic investigation
• Implementation of every recommendation
• Continuous monitoring, managed detection or an ongoing support contract
• A guarantee that a security incident cannot occur

Work beyond the stated limits or implementation of the recommendations requires a separate written quotation.