Risk & posture reviews
We map what matters most to your business, who can access it and where you’re exposed, then turn that into a list of fixes in priority order.
An asset and risk summary.
02Cybersecurity
Cybersecurity reviews
and incident planning
Find out where your business is exposed, fix the gaps that matter most, and make sure your team knows exactly what to do if something goes wrong.
- Environment-scoped reviews
- Defined response responsibilities
CHOOSE A REVIEW FOCUS
Who can access what?
Check who can get into your important accounts, and who approves that access.
Where could exposure begin?
Check that laptops and the network are set up securely, kept up to date and watched for warning signs.
What happens when something changes?
Decide who investigates, who gets called and who makes decisions when there’s an incident.
Illustrative review map · no live scan or system data
CAPABILITIES WITH A CLEAR SCOPE
Security across
the environment
We check your accounts, devices, network and business systems, then give you a plain-English list of what to fix first and who should own it.
Example deliverables · tailored to you
Understand the exposure
Governance & documentation
Written records of your security controls and decisions, ready for insurers, auditors or your board.
A control record and review schedule.
Strengthen the controls
Identity & access
Stronger logins, tidier permissions, and a reliable process when staff join, change roles or leave.
An access improvement plan.
Endpoint & network controls
Laptops, servers and network equipment configured securely and kept patched.
Prioritised configuration and patch actions.
Prepare the response
Visibility & monitoring
Set up the alerts and routines that help you spot trouble early and look into it properly.
Defined monitoring signals and investigation roles.
Incident readiness
Simple step-by-step plans for common incidents, written before you need them.
Response playbooks and escalation contacts.
These are examples. Your quote lists exactly what we’ll deliver, when, and any ongoing support.
TRANSPARENCY / TRUST & POLICIES
Agree the scope of the security work
Our security policies for risk, account protection, device security and incident response are public, so you can read them first. We confirm what applies to your business when we start.
The policies are a working draft. The parts that apply to you are written into your agreement, and your records stay private.
Explore the policy libraryHOW THE WORK MOVES FORWARD
How a security
review works
You’ll know what we’re doing, who owns what and when we’ll check progress before we start.
Review the baseline
We look at your key systems, the protections already in place and the risks that would hurt most.
Prioritise the work
We agree what to fix, who fixes it and how we’ll know it’s done.
Implement & document
We make the approved changes and keep a record of each one.
Review & prepare
We check back as your business changes, so your security keeps up.
- 01
Exposure
Which systems, accounts and dependencies need attention?
- 02
Priorities
What should be addressed first, and who owns it?
- 03
Follow-up
How will changes and remaining risks be reviewed?
FROM FINDINGS TO ACTION
What the security review covers
A security review is only useful if you know what to do next. You’ll get clear findings, a priority order and practical next steps.
Read the security baseline guideCONNECTED CAPABILITIES
Related NovaSoft products
Our own products that can help. Each page explains what it does and whether it’s available yet.
NovaSuite
NovaSuiteFiles, documents, communication and private AI in a collaboration environment deployed on infrastructure you control.
Explore NovaSuite
CyberGuardian
CyberGuardianSecurity visibility, exposure prioritisation and response workflows, connected to Novasoft’s cybersecurity services.
Explore CyberGuardianTAKE THE DISCUSSION FURTHER
IT policies and workbooks
Free, fillable IT worksheets for reviewing your setup and recording decisions with your team.
Explore the workbooksChoose your security starting point.Practical guides & next steps
BEFORE WE START
Scope, access and responsibilities
Where does CyberGuardian fit?
CyberGuardian shows what’s on your network, which risks to fix first and what to do when something happens. We’ll tell you honestly whether it suits your business.
Will this make our business compliant?
Not on its own. Compliance depends on your obligations and how your business runs. We’ll work towards your requirements, but no single service or product guarantees compliance.
Can security be included with managed IT?
Yes. Security and everyday IT support work best together, and we can handle both under one agreement.
Can we begin with a security review?
Yes. Most clients start there. We agree which systems we’ll review and what you’ll get at the end before we begin.
Will you change systems during the assessment?
Not without your approval. We agree up front what we’ll look at and change, and nothing is changed without sign-off.
How are fees and ongoing coverage agreed?
Your quote sets out the review, what you get and the fee. Ongoing monitoring or response support is priced separately if you want it.
LET’S DISCUSS YOUR NEXT STEP
Plan your next
security improvement
Tell us what worries you about your security and what systems you use. We’ll suggest where to start.