Security & compliance

Assessments and uplifts against the ASD Essential Eight and SMB1001, Microsoft 365 security configuration, and taking over clients from another provider.

Evidence your clients can show insurers, boards and tenders

Clients are being asked to prove their security. Cyber insurers ask about MFA, backups and application control. Tenders name an Essential Eight maturity level. Boards want to know where the business stands. The projects here produce that evidence.

Most start with an Essential Eight assessment: a measured view of each of the eight strategies, with the gaps prioritised. From there, an uplift closes the gaps to the target level, SMB1001 readiness prepares a client for certification, and a Business Premium security baseline configures the controls already included in many clients’ Microsoft 365 licences.

New client takeover sits here too. When you win a client from another provider, the first job is security: knowing who still has access, changing credentials in the right order and finding the risks before they become yours.

Every project is delivered remotely and white-label, under your brand or as your named partner, at a fixed price for the agreed scope.

These are the security and compliance projects we’re asked for most. If yours isn’t listed, send us the brief and we’ll scope it.

  • Essential Eight assessment

    Assess the client against the ASD Essential Eight at Maturity Levels 1, 2 and 3. The report gives you the answers for cyber-insurance questionnaires.

    Maturity report and prioritised roadmap

  • Essential Eight uplift to ML1, ML2 or ML3

    Implement the missing controls to the target maturity level, including application control, patching, MFA and backups.

    Controls in place, with evidence

  • SMB1001 certification readiness

    Implement the technical controls and policies needed for SMB1001 at any tier from Bronze to Diamond. Certification is issued separately by CyberCert.

    Controls and policies in place for certification

  • Microsoft 365 Business Premium security baseline

    Configure the security features included in the client’s licence: Conditional Access, MFA, Defender for Business and Intune compliance policies, plus SPF, DKIM and DMARC with a plan to reach enforcement.

    Configured tenant and as-built documentation

  • New client takeover

    Take over a client from another provider: discovery, documentation, credential rotation and migration to your standard tools.

    Documented environment and rotated credentials

Request a quote

Tell us about the project and the client. We scope it and quote a fixed price.

Request a quote