Enterprise technology health check
Business priorities, applications, infrastructure, security, operations, suppliers, cost and risk
Technology strategy and governance
Assessment portfolio
Browse 88 independent, standards-based assessments
Filter by domain or search by keyword to find the assessment that fits your challenge. Not sure? Tell us your scope and we'll recommend.
88 assessments
IT strategy and transformation roadmap
Business alignment, investment themes, sequencing and dependencies
Technology strategy and governanceCIO/CTO advisory
Investment, architecture, governance, programme and board decisions
Technology strategy and governanceIT operating model assessment
Roles, accountability, sourcing, service ownership and escalation
Technology strategy and governanceIT governance and decision rights
Committees, policies, approvals, exceptions and reporting
Technology strategy and governanceTechnology portfolio rationalization
Business value, technical health, cost, duplication and retirement
Technology strategy and governanceDigital transformation opportunity assessment
Journeys, manual work, handoffs and feasibility
Technology strategy and governanceTechnology investment business case
Benefits, total cost, operating impact, risks and options
Technology strategy and governanceEnterprise architecture assessment
Business, application, data, integration, infrastructure and security architecture
Technology strategy and governancePost-merger or separation technology assessment
Systems, contracts, identities, networks, data and separation dependencies
Technology strategy and governanceIT operations maturity assessment
Monitoring, events, incidents, changes, staffing and reporting
IT operations and service managementITSM process assessment
Incident, request, problem, change, knowledge, asset and configuration workflows
IT operations and service managementService desk assessment
Channels, volumes, resolution, self-service, staffing and automation
IT operations and service managementService catalogue and SLA design
Service owners, dependencies, hours, service levels and escalation
IT operations and service managementMonitoring and observability assessment
Logs, metrics, traces, synthetic checks, alerts and service mapping
IT operations and service managementAIOps and operations automation opportunity study
Recurring incidents, event volumes, data quality and safe automation
IT operations and service managementCMDB and service mapping assessment
Configuration sources, relationships, quality, ownership and change integration
IT operations and service managementInfrastructure capacity and performance review
Compute, storage, network and database demand
IT operations and service managementManaged services design and sourcing
Scope, staffing, transition, governance, SLA and pricing units
IT operations and service managementVendor and contract performance assessment
Contracts, service reports, incidents, penalties and concentration risk
IT operations and service managementCloud readiness assessment
Workloads, dependencies, data, licensing, connectivity and skills
Cloud, infrastructure and modernizationCloud architecture and landing-zone review
Identity, network, policy, logging, backup, keys and resilience
Cloud, infrastructure and modernizationCloud migration governance
Wave plans, test, cutover, rollback, cost and handover
Cloud, infrastructure and modernizationHybrid and multicloud operating model
Identity, network, monitoring, security and support ownership across environments
Cloud, infrastructure and modernizationCloud cost and FinOps assessment
Allocation, idle capacity, sizing, commitments and forecasting
Cloud, infrastructure and modernizationData centre and infrastructure modernization
Platform lifecycle, virtualization, storage, network and facilities
Cloud, infrastructure and modernizationNetwork architecture assessment
Topology, segmentation, exposure, WAN, redundancy and visibility
Cloud, infrastructure and modernizationApplication modernization assessment
Business value, technical debt, scalability and dependencies
Cloud, infrastructure and modernizationAPI and integration architecture review
Interfaces, authentication, contracts, errors and observability
Cloud, infrastructure and modernizationDevOps and platform engineering assessment
CI/CD, infrastructure as code, releases and production support
Cloud, infrastructure and modernizationCybersecurity posture assessment
Governance, assets, identity, protection, detection, response and suppliers
Cyber governance and riskCyber risk assessment
Critical services, threats, vulnerabilities, controls and business impact
Cyber governance and riskSecurity strategy and programme roadmap
Translate business risk into policy, people, process and technology priorities
Cyber governance and riskVirtual CISO or security leadership advisory
Risk reviews, policy, board reporting and supplier assurance
Cyber governance and riskISO 27001 readiness assessment
ISMS scope, risk method, controls, evidence and internal audit
Cyber governance and riskNIS2 applicability and readiness review
Entity classification, national implementation, governance and incident duties
Cyber governance and riskDORA readiness assessment
ICT risk, incidents, resilience testing and third parties
Cyber governance and riskThird-party cyber risk assessment
Supplier tiering, due diligence, contracts, access and exit
Cyber governance and riskSecurity policy and control framework design
Policies, standards, exceptions, control owners and testing
Cyber governance and riskCybersecurity metrics and board reporting
Risk-related metrics, data sources and thresholds
Cyber governance and riskCyber insurance readiness review
Underwriting evidence for MFA, backup, incident response and suppliers
Cyber governance and riskIdentity and access management assessment
Lifecycle, MFA, privilege, service accounts and access review
Cyber architecture and technical assuranceZero Trust architecture assessment
Identity, devices, apps, paths, data access and policies
Cyber architecture and technical assuranceNetwork security and segmentation review
Firewall rules, exposure, remote access and administration
Cyber architecture and technical assuranceCloud security posture assessment
Configurations, permissions, logs, encryption and key management
Cyber architecture and technical assuranceEndpoint and server security assessment
Hardening, EDR, patching, privilege and unsupported assets
Cyber architecture and technical assuranceVulnerability and exposure management review
Coverage, prioritization, remediation, exceptions and verification
Cyber architecture and technical assuranceApplication security and secure SDLC review
Requirements, threat models, dependencies, secrets and release gates
Cyber architecture and technical assuranceWeb, API and mobile security testing
Scoped authentication, authorization, inputs, logic and data exposure
Cyber architecture and technical assurancePenetration testing and adversary simulation
Authorized scoped attack paths and defensive response
Cyber architecture and technical assuranceEmail and collaboration security assessment
Domain authentication, phishing, sharing, retention and incident flows
Cyber architecture and technical assuranceData protection and privacy technology review
Sensitive data, access, encryption, retention, DLP and deletion
Cyber architecture and technical assuranceCryptography, PKI and secrets review
Keys, certificates, secrets, rotation and recovery
Cyber architecture and technical assuranceSOC maturity assessment
Coverage, staffing, triage, escalation, tooling and intelligence
SOC, detection and responseSIEM/SOAR architecture and value review
Log sources, ingestion, parsing, cost, detection and automation
SOC, detection and responseDetection engineering assessment
Threat scenarios, telemetry, rules, false positives and testing
SOC, detection and responseIncident response readiness
Roles, communications, containment, evidence and playbooks
SOC, detection and responseCyber crisis tabletop exercise
Executive and technical response to realistic scenarios
SOC, detection and responseThreat hunting readiness
Telemetry, hypotheses, intelligence and analyst processes
SOC, detection and responseRansomware resilience assessment
Entry paths, lateral movement, backup compromise and recovery
SOC, detection and responseBusiness impact analysis
Critical services, tolerable disruption, dependencies and recovery needs
Continuity, DR and resilienceBusiness continuity programme assessment
Governance, plans, alternate working, communications and exercises
Continuity, DR and resilienceIT disaster recovery assessment
Dependencies, replication, backup, recovery sites and runbooks
Continuity, DR and resilienceBackup and restore assurance
Coverage, immutability, retention, separation and actual restores
Continuity, DR and resilienceDR architecture and strategy design
RTO/RPO, consistency, connectivity, cost and complexity
Continuity, DR and resilienceRecovery exercise design and observation
Tabletop, component, app or full-service recovery tests
Continuity, DR and resilienceCritical service resilience assessment
End-to-end applications, people, facilities and suppliers
Continuity, DR and resilienceOT cybersecurity baseline assessment
Sites, processes, systems, connectivity, ownership and safeguards
OT and industrial cybersecurityOT asset inventory and criticality review
PLC, HMI, SCADA, historians, workstations and process criticality
OT and industrial cybersecurityOT architecture and data-flow assessment
Control networks, IT/OT links, cloud, remote sites and vendors
OT and industrial cybersecurityZones and conduits design
Security grouping, communications and inter-zone controls
OT and industrial cybersecurityOT risk and consequence assessment
Cyber scenarios affecting safety, production, environment and quality
OT and industrial cybersecurityIEC 62443 programme gap assessment
Asset owner, integrator or product supplier obligations
OT and industrial cybersecurityIT/OT boundary security review
Firewalls, DMZ, jump hosts, historians, transfers and identity
OT and industrial cybersecurityOT remote access and vendor access assessment
Approval, identity, sessions, vendor devices and emergency access
OT and industrial cybersecurityOT vulnerability and patch management design
Advisories, vendor support, maintenance, test and compensating controls
OT and industrial cybersecurityOT backup and recovery assessment
PLC logic, configurations, HMI/SCADA, historians and spares
OT and industrial cybersecurityOT monitoring and incident response readiness
Safe telemetry, process-aware alerts, escalation and containment
OT and industrial cybersecurityOT project and system design security review
Procurement, engineering, FAT, SAT and handover
OT and industrial cybersecurityIndustrial supplier and integrator assurance
Vendor security, maintenance, lifecycle and contractual duties
OT and industrial cybersecurityOT security testing in a controlled environment
Approved passive, lab or carefully controlled site tests
OT and industrial cybersecuritySector-specific OT review
Manufacturing, utilities, energy, transport, healthcare or buildings
OT and industrial cybersecurityData governance maturity assessment
Ownership, quality, lineage, access, retention and issues
Data, AI and emerging technologyData platform architecture review
Ingestion, integration, storage, analytics, cost and reliability
Data, AI and emerging technologyAI use-case and readiness assessment
Problems, data, integration, economics and oversight
Data, AI and emerging technologyAI governance and risk assessment
AI inventory, data, models, evaluation, oversight and monitoring
Data, AI and emerging technologyGenerative AI security assessment
Data exposure, prompt injection, permissions, RAG and validation
Data, AI and emerging technologyIoT and edge security assessment
Identity, provisioning, firmware, cloud integration and lifecycle
Data, AI and emerging technologyReady to assess your technology & security posture?
Book an independent, standards-based assessment. We'll scope the right engagement for your environment.