Security · Assess
IT & Security Audit
Most organisations don't have an accurate inventory of their own IT, let alone its risk. Our audit replaces assumptions with evidence: a documented view of every device, identity, network path and cloud service, measured against recognised control frameworks.
What you get
- A complete, verified asset and identity inventory
- Findings scored by business risk, not vendor noise
- A remediation roadmap with costs and sequence
- Board-ready reporting you can hand to an auditor, insurer or regulator
Who it's for
Businesses preparing for POPIA compliance, cyber-insurance renewal, an ISO 27001 journey, a tender due-diligence questionnaire, or simply a change of IT provider.
What's included
Infrastructure & network review
Firewalls, switching, Wi-Fi, remote access and segmentation, checked against vendor hardening guides and CIS benchmarks.
Microsoft 365 & Entra ID posture
Identity, MFA and conditional access, mailbox security, sharing and data-loss settings, privileged roles.
Azure & cloud configuration
Subscriptions, role assignments, exposed services, backup and logging, cost hygiene.
Endpoint & server baseline
Patch state, encryption, EDR coverage, local admin rights, legacy systems.
Policy & process gap analysis
What your written policies say against what your environment actually does, mapped to POPIA, CIS Controls and NIST CSF.
Ready to scope your IT & security audit?
One call to agree scope and timing. Fixed price before any work starts.