Services

Configuration Review

Identifying optimal configurations against CIS benchmarks, because most breaches trace back to misconfiguration rather than an unknown flaw.

Capabilities

Configuration Review across your estate

Reviews cover firewalls, endpoints, switches, Microsoft 365, Google Workspace, MDM, DLP, backup, Active Directory, PAM, IAM, CASB, SASE and SAP.

Firewall
Rule base and platform review of perimeter and internal firewalls against CIS benchmarks and vendor hardening guides, including the shadowed, redundant and any-any rules that accumulate over years.
Methodology and deliverables
Endpoint
Windows, macOS and Linux endpoint hardening reviewed against CIS benchmarks, covering the build, the management policy that maintains it, and whether endpoint protection is configured to actually stop anything.
Methodology and deliverables
Microsoft 365
Tenant-wide review of Entra ID, Exchange Online, SharePoint, Teams and Defender against the CIS Microsoft 365 Benchmark, with conditional access and external sharing as the primary focus.
Methodology and deliverables
Google Workspace
Review of Google Workspace against the CIS Benchmark, covering admin roles, 2-Step Verification enforcement, Drive sharing, OAuth application access and Gmail security.
Methodology and deliverables
Switches & Routers
Hardening review of switches, routers and wireless infrastructure against CIS benchmarks, covering the management plane, VLAN design and the legacy protocols still enabled by default.
Methodology and deliverables
IAM & PAM
Review of identity governance and privileged access management — joiner-mover-leaver, entitlement creep, vault coverage and session control — against the accounts that should not still exist.
Methodology and deliverables
Backup & Recovery
Review of backup architecture, immutability and restoration capability against the 3-2-1-1-0 rule — because in a ransomware event the backup is the control that decides whether the business pays.
Methodology and deliverables
SAP
Review of SAP security configuration — profile parameters, standard users, RFC connections, transport controls and authorisation design — against SAP's own guidance and segregation of duties requirements.
Methodology and deliverables

Configuration Review

Firewall

Endpoint

Microsoft 365

Google Workspace

Switches & Routers

IAM & PAM

Backup & Recovery

SAP