The process for the audit is relatively straightforward. We meet in-person or virtually, depending on your location and preference. At the meeting we review our list of detailed questions, similar to an external or internal compliance audit. We record each response in detail and later draft a report out of the findings. You can expect this initial meeting to last between 1-3 hours.

All stakeholders who have knoweldge of your company’s network, data and staff should be present if possible. This ensures that we gather quality data (the correct answers) so the audit report reflects honesty and accuracy.

After our intial meeting, we draft a detailed “appraisal” report for each item related to your security posture. This includes our findings and tangeable suggestions as well as a per-item risk score. This final report also includes a global risk score for your company.

Absolutely. The audit is conducted without active penetration testing so it won’t affect your network or data in any way. No access is needed other than our detailed interview and data gathering meeting.

All information is completely confidential. We never, under any circumstances, divulge our customer list to anyone, including other customers. We do not use your company for the benefit of sales or marketing in any way. Our findings, and the audit itself, are only known by our two firms alone.

Absoutely not. In order to remain impartial, and for you to trust in our unbiased suggestions, it is impossible for us to sell any additional IT services that relate to the audit.

Once we provide you with our findings and action items, you can follow up with your own internal or external IT team to implement any changes. We can continue to offer advice throughout that process if needed.

Absoutely not. Your IT team is doing a great job of balancing the extreme requirements demanded of them with a limited budget and lack of time. At no point are our findings a reflection of their work.

Our audit report will assist them in having an actionable list that you both review for execution. In many cases, they might have had similar suggestions in the past. Overall, the audit assists your IT team in justifying initiatives aimed at securing your company, protecting their jobs and even finding more billable services for themselves.

No. Security audits are sensitive and we believe them to be a personal interaction between both our companies. All work, from the initial meeting to the final audit report, is performed by our local staff located in Long Island, NY. This leads to a lasting relationship based on trust and a professional experience overall.