The problem
When an incident happens or a customer sends a security questionnaire, undocumented controls are hard to evidence.
Deliverables
- Security controls documentation
- Incident response outline
- Roles and responsibilities
What's included
- Kick-off call to confirm scope and access
- Review of the agreed systems and configuration
- Written findings prioritised by risk and effort
- Walk-through call to explain results
What's not included
- Remediation or implementation work (quoted separately)
- Penetration testing or vulnerability exploitation
- Compliance certification, audit sign-off or legal advice
- On-site visits
Delivery model
Individual Expert
Direct access to Koustov Choudhury for focused technical work.
Process
- Requirements
- Assessment
- Implementation
- Validation
- Delivery
- Report