Service · Defensive
Security Health Check: where do you really stand?
We analyse your infrastructure, processes, people and security policies as a whole. You receive a risk report that says what is most likely to hit you and what to do first. Without 200 pages nobody reads.
from CHF 7,500
depending on company size
2 – 5 days
remote or on site
1 roadmap
prioritised by risk and effort
ISO · NIS2 · FADP
compliance preparation included
Who the health check is for
You are taking over responsibility for IT security
New in the role as IT lead, CFO or managing director and want to know what you have inherited. The health check gives you in one week the overview that would otherwise take months.
Your insurer or a customer demands evidence
Cyber insurance, key account audit, NIS2 as a supplier, ISO 27001: you need a solid assessment and a plan. We deliver both.
You have a gut feeling, but no facts
Something is not right, but nobody can say what. We look where your IT partner has become blind to the obvious.
After an incident
The attack has been repelled, now it should be the last one. The health check finds the gaps that are still open.
What we assess
Four dimensions, because cybersecurity rarely fails on technology alone.
Infrastructure
Technology
Network, endpoints, servers, cloud, backups, identities and access rights. Configurations, patch levels, segmentation, logging.
Processes
Procedures
How are accesses granted and revoked? What happens during an incident? Who decides, who calls whom, where is it written down?
People
Employees
Awareness, phishing susceptibility, handling of passwords and data. Without finger-pointing, with concrete recommendations.
Policies
Rules
Security policies, contracts with IT service providers, data protection under the Swiss FADP. What is missing, what exists only on paper.
Process
Kick-off
Define goals, scope and contacts. Which compliance requirements should be taken into account?
Analysis
Technical review of systems, interviews with IT and business units, review of documents and contracts. Remote or on site.
Risk report and roadmap
Prioritised list of risks with likelihood, impact and remediation effort. Plus an action plan your IT partner can implement directly.
Presentation
We present the results to management, in their language. With the three things that need to be decided now.
Frequently asked questions
How is this different from a penetration test?
The penetration test answers the question: can an attacker get in? The health check answers: how well positioned are you overall, technically, organisationally and in terms of people? Often the health check is the first step and the pentest the second.
How much internal effort is required?
Expect about half a day for interviews and access. We take care of the rest. We work closely with your IT partner, not against them.
Does the health check prepare for ISO 27001 or NIS2?
Yes. We align with ISO 27001, NIST CSF and the NIS2 requirements and show you specifically where the gaps to certification are. It does not replace a certification audit.
What does the health check cost?
From CHF 7,500 excluding VAT for a company with one location. Multiple locations or special compliance requirements are quoted individually.
Request a quote
Tell us briefly how large your company is and whether specific requirements (insurance, ISO, NIS2) are involved. You will receive a concrete quote within one business day.