A reliable snapshot of the risk current.
The initial assessment is the starting point for setting up a consistent security program. It does not coincide with a single automatic scan: it relates assets, identities, configurations, processes, operational dependencies, data and response capabilities.
Analysis perimeter
- critical services, servers, endpoints, network, cloud and applications;
- accounts, administrative roles, MFA and remote access;
- patching, hardening, EDR/antimalware and security configurations;
- backup, restore tests, continuity and supplier dependencies;
- email, domains, shares and risk of compromise;
- logging, alert management and incident response procedures;
- policy, responsibility and level of awareness of staff.
Work phases
After an initial meeting, technical and documentary evidence is collected, targeted interviews are carried out and the most relevant configurations are verified. The results are discussed with the stakeholders to distinguish real vulnerabilities from motivated exceptions or false positives.
Deliveries
- summary profile of the maturity level;
- register of main exposures with evidence;
- classification by impact, probability and urgency;
- quick wins applicable in the short term;
- medium-term roadmap with priorities and dependencies.
The assessment allows you to avoid investments disconnected from risk and creates a baseline against which subsequent improvements can be measured.