Sound familiar?
- Everyone shares one password for something important.
- Nobody's sure which computers are up to date.
- A phishing email almost worked.
- Former staff might still have access somewhere.
- Your insurer asked about security and you had to guess.
What I look at
- What you have
- The computers, phones, software and accounts the business runs on.
- Who can get in
- Passwords, two-step sign-in, admin rights, and access for people who've left.
- Updates and protection
- Whether computers and software are kept up to date, and what's watching for malware.
- Email and web
- How well you're protected from phishing and bad links.
- Recovery and people
- Backups, what happens on a bad day, and whether your team knows what to look out for.
What you get
- A red, amber and green scorecard against the CIS Controls IG1 baseline, the Center for Internet Security's starting set for small organizations.
- A fix list, in order, with rough cost and who can do each one.
- Each finding in plain English: what it is, and what happens if you leave it.
- A written record of where you stand, handy when an insurer or a client asks.
For a business your size, security is mostly the basics, done every time.
How it works
- Free 15-minute call (optional)
Tell me what's worrying you. If this review is the right one, I'll say so. If it isn't, I'll tell you that too.
- What I need from you
A questionnaire, a walkthrough with you, and a signed authorization before I look at anything.
- I do the review
I go through everything against a checklist, and I check every finding myself before it goes in the report.
- The written report
A red, amber and green scorecard up front, then each finding in plain English: what it is, what happens if you leave it, and how to fix it.
- Review call, 30 minutes
We go through it and decide what to fix first. Do it yourself from the list, or I'll fix it at a fixed price and credit the review fee toward it.
Straight answers
No one can make a business secure, and I won't claim to. This tells you where you stand against a recognized baseline and what to do next.
It's an assessment, not a penetration test or a certification.
Fixes are a separate project at a fixed price, with the review fee credited toward it.
Do you try to break in?
No. This isn't a penetration test. I look at how things are set up and how you work, with your written permission.
Is this the same as the Microsoft 365 review?
That one goes deep on email and files. This one covers the whole business at the baseline level. If you're on Microsoft 365 or Google Workspace, the two fit together.
Start with 15 minutes
Free 15-minute call
Tell me what's going on. You'll get an honest answer on whether this review is worth it for you, or whether something else fits better.
Book the free callNot sure which one?
Most owners start with the AI Time-Back Assessment: five hours a week back, or you don't pay.
See the AI Time-Back AssessmentQuestions? Email patrick@findmytime.ai or call (949) 334-7731.