Security
We review the security monitoring systems in place and assess identity management alongside server and endpoint device security settings. We provide a detailed security risk register and associated mitigations. This ensures a comprehensive and clear understanding of your security posture.
Architecture
We create detailed diagrams that represent the current mode of operation. These offer a high-level overview of your architecture. We delve into the specifics of network connectivity, as well as an in-depth examination of security architecture, detailing the implementation of firewalls, demilitarized zones (DMZs), and virtual private networks (VPNs).
Infrastructure
We assess compute, storage, and infrastructure capacity, alongside yearly trends. Service level parameters for all components and the overall architecture are outlined to ensure performance and reliability. Additionally, we list the Platform as a Service offerings in use, such as databases and cloud-native applications.
Business Processes
We compile a detailed list of current business reporting lines to understand the organisational structure and communication flow. We document the various business processes along with the underlying applications that support them. We also assess and list the potential risks associated with these.
Business Continuity
We review backup schedules and identify existing services covered by your Business Continuity Plan. We assess replication strategies, including zone and geographic replications, and document the desired Recovery Time Objectives and Recovery Point Objectives.