Controlled scope
The review is limited to authorised areas.
You know what is in scope, what will happen and what you will receive before the security review begins.
Briefly explain your devices, accounts, team, network and the concerns you would like to address.
Agree exactly what may be reviewed, the intended depth and any practical limitations.
Examine the authorised configurations and practices for weaknesses, unsafe settings and gaps.
Put each relevant finding into understandable language, with context and recommended action.
Where included in the service scope, help with suitable remediation steps and explain important precautions.
Get a clear record of the reviewed scope, findings, priorities, recommendations and next steps.
The review is limited to authorised areas.
You understand what is being checked and why.
Findings are translated into practical meaning.