Security Assessment
Find out where you’re exposed, before someone else does.
A practical review of the places attacks really start: email, passwords and sign-ins, devices, backups and your network. You get a prioritized plan in plain language, from a senior TKG Edge principal.
Sound familiar?
Why companies ask for one
“Our cyber insurance renewal is coming up.”
“We just had a phishing scare.”
“A customer sent us a security questionnaire.”
“No one has ever looked.”
What we review
The six places most attacks begin
We focus on the controls that stop real attacks, not a checklist for its own sake.
Email security
Phishing and impersonation protection, link and attachment scanning, and how your domain is protected from spoofing.
Identity & sign-in
Multi-factor authentication coverage, admin accounts, password policies and who can access what.
Devices & endpoints
Endpoint protection, patch levels, encryption and unsupported systems across your computers and servers.
Backup & recovery
What’s backed up, where it lives, whether it’s protected from ransomware, and whether a restore has ever been tested.
Network & firewall
Firewall rules, remote access, wireless and internet connections reviewed against current standards.
Microsoft 365 configuration
Security defaults, sharing settings, audit logging and admin roles in the system that holds most of your data.
What you get
A plan you can act on, not a stack of scan results
Findings are ranked by risk and explained in plain terms, so leadership knows what matters and your team knows what to do first.
01
Prioritized findings
Every gap ranked by risk, with the quick wins called out.
02
Executive summary
A plain-language overview for leadership and your board.
03
Remediation plan
Clear next steps your team can take, or we can handle for you.
04
Insurance and questionnaire readiness
Answers for the questions insurers and customers are asking.
05
Walkthrough meeting
A senior principal reviews the results with you and answers questions.
How it works
Four steps from unknown to understood
Designed to fit around your business, with no disruption to your team.
01
Kickoff
We agree on scope and get read-only access to the systems we’ll review.
02
Review
We run scans and review configurations across email, identity, devices, backups and network.
03
Findings
We rank what we find by risk and write up the report and executive summary.
04
Plan
We walk you through the results and build a plan, whether your team fixes it or we do.
FAQs
Common questions about security assessments
Is this a penetration test?
No. A security assessment reviews your controls and configuration. Penetration testing goes deeper and is available separately as part of our compliance and testing services.
Will it disrupt our business?
No. We use read-only access and schedule any scans around your busy hours.
What if you find something urgent?
We tell you right away, and we can help you fix it before the full report is done.
Do we have to become a managed IT client?
No. Many companies use the assessment on its own, or hand the results to their internal IT team.
Start the partnership
Get your security assessment
Tell us a little about your company and we’ll set up a time to scope the review.