The Security Healthcheck is a strategic tool for assessing and improving cyber security. Our cyber experts analyse your company’s information security step by step by evaluating your current security measures. Topics covered include:

• Policy, organisation, laws and regulations, and responsibilities
• Incident management
• Access control
• Asset management
• Change management
• Protection of intellectual property (IP)
• Supply chain security management (supplier management, cloud security, etc.)
• Operational technology (OT – information and industrial control systems (ICS))
• IT management (technical IT measures)

After the assessment, we discuss your personal report with you and advise on the measures you can take to improve your organisation’s security.

The assessment process consists of the following steps:

• Orientation: An impact analysis is carried out to determine which healthchecks need to be performed.
• The assessment: The healthchecks selected from the list above are carried out.
• Results and recommendations: Based on the healthcheck, the results are presented in a diagram along with recommendations. This makes it clear how the company scores, what needs to be done, and with what priority.
• Evaluation: After some time, a follow-up meeting is scheduled to determine how far the organisation has come in implementing the recommendations. The organisation can indicate whether it would like additional support or regular evaluations.

The assessment is conducted through a high-level personal interview. Our expert meets in person with company representatives and asks key questions covering various aspects of information security and cyber resilience. The data gathered in this process is compiled into a summary report. This report sets out the points that need to be addressed, with low or high priority, to better safeguard your cyber security. The results of the analysis are also presented in charts.

The following follow-up services are also optionally available from us:

• Security awareness support
• Monitoring and reporting of leaked passwords
• Incident response
• Additional security advice
• Technical security check by an ethical hacker
• Phishing email test
• Drafting a code of conduct