Security review and risk assessment for small businesses

Most businesses have no reliable picture of what is connected to their network, what software is running on it, or which of it is still supported. That gap is where most incidents start.

I go through what you actually have: devices, cloud accounts, software, who can log in as an administrator, what is exposed to the internet, and where your data sits. Then you get a plain list of what would cause real damage if it went wrong, ordered by how likely it is and how bad it would be.

No jargon, no hundred page report. A short document you can act on, and a conversation about which three things to do first.

Useful before a certification, after a scare, or when a customer sends you a security questionnaire you cannot answer. One to two days depending on size, ending with a short written document and a call to talk it through.