What is a Cybersecurity Health Check?
A Cybersecurity Health Check is a fixed-scope review of the security basics a small business depends on, such as sign-in, email, backups, devices and remote access. It ends in a short, ranked list of what to fix first.
Most small businesses have some security in place. Very few know how well it holds up. Multi-factor authentication is on for some accounts and not others. Backups run, but nobody has tried restoring one. An old remote access tool is still open to the internet.
The Health Check puts those questions in front of a senior consultant. You get a clear picture of where you stand, what matters most and what can wait. Scope and deliverables are agreed before work starts, so there are no surprises.
It is also the natural first step. Findings usually point to a specific next piece of work, such as Microsoft 365 hardening, ransomware recovery or an ongoing advisory arrangement. You decide whether to act on them, and with whom.
Who needs it?
- A business with no one clearly responsible for security
- A company that relies on an IT provider and wants an independent view
- A team about to renew cyber insurance or answer a customer questionnaire
- An owner who knows security matters and does not know where to start
What problems does it address?
- Nobody can say with confidence how secure the business is
- Multi-factor authentication on some accounts and not others
- Backups that run but have never been test-restored
- An old remote access tool still open to the internet
- An insurer or customer questionnaire you are not sure how to answer
What we assess
- Identity, multi-factor authentication and administrative accounts
- Microsoft 365 and other core cloud services
- Email security and phishing exposure
- Endpoint protection and patching
- Backups and whether they can be restored
- Network security and remote access
- Services exposed to the internet
- Security monitoring and logging
- Basic security policies
What you receive
- An executive summary a business owner can read in five minutes
- An overall risk rating
- The key risks, in plain language
- Findings ranked by what to fix first
- Quick wins you can finish in days
- A 90-day action plan
- Longer-term improvements, in a sensible order
What happens afterward?
You decide what to do with the findings, and with whom. Your team or IT provider can carry them out, with Avertix guiding the changes and retesting them if you want, or you can keep senior help on hand through an advisory arrangement. Many clients stop after the report.
How the engagement works
Free consultation
A 45-minute call with a senior consultant about your situation. It is a conversation, not an assessment. You leave with a recommended next step.
Scope and price
Scope, deliverables and price are agreed in writing before any work starts.
Assessment
The consultant who scoped the work does it. Requests to your team stay small, and we work with your IT provider where you have one.
Findings and walkthrough
You get a written report and a walkthrough. Findings are ranked, so you know what to do first and what can wait.
