Independent security review

You pay for IT services. Do you know what security is included?

Know what the records show about your security, where the gaps are, and who needs to act.

The Security Reality Check is an independent, fixed-fee review of your security controls and provider commitments. Whether your IT is managed in-house, outsourced, or both, we review the records to identify gaps and clarify who needs to act.

Discuss your review Try the free checklist

See the full scope and deliverables

What you receive

Evidence, ownership, and next steps.

Your written report identifies gaps, assigns next steps, and sets priorities. We walk through it with leadership.

Understand your security coverage

Executive findings summary

The executive summary explains what the reviewed evidence supports, where questions remain, and which findings require a leadership decision.

Know who needs to act

Security confidence scorecard

The scorecard brings together domain ratings, control ownership, and immediate actions. Missing ownership and insufficient evidence are clearly identified.

Set priorities for the next 90 days

30/60/90-day roadmap

The roadmap puts recommended actions in priority order, with an owner and the evidence needed to confirm completion.

From the sample report

What a finding looks like

See how the report turns records into a clear concern, an action, and an owner. Illustrative example, not a client finding.

How we check the evidence

Domain: Backup & Recovery
Status: Critical Gap

The backups ran. Recovery was unproven.

Nightly backup records showed successful jobs. But the system administrator account could also delete the backup copies, and no recovery-test record was supplied.

Next step: Protect the backup copies and demonstrate recovery.
Responsible: IT provider
Approval: Managing partner

View the full sample finding

When an independent review helps

When the business changes, check what still protects it.

Before a provider renewal, an insurance review, or a change to how your team works, check what the records show about your controls and who is responsible for the gaps.

Before you renew a provider
Compare the service you were sold with the evidence that it is being delivered.
Before the next wire or trust-account instruction
Check what the records show about mailbox compromise and unwatched forwarding rules.
Before connecting AI to company data
Identify what it can access, what it can change, and which actions require approval.
Before an insurance or client review
Know which security statements you can support with records and which still need checking.

A useful first step

Not sure where to start? Try the checklist.

The free Security Reality Snapshot is a 15-question checklist covering responsibilities, access, and recovery. Use it to identify what you know, what you need to ask, and where to start.

No email is required. Read it online or print it to work through with your IT team or provider.

Try the free checklist

Get a clear view of your security

Tell us about the concern or decision that prompted your interest. We reply within two business days to arrange a free 30-minute scoping call, or to scope by email if you prefer. You get a written fixed-fee quote before any work starts.

Discuss your review