Independent IT audit

The IT Check for your business

A full IT audit, tailored to mid sized businesses. We assess your IT against over 100 checks in eight areas, document the current state and deliver findings with a prioritised action plan.

Request an IT Check Try the self check first

The IT Check is a full IT audit for mid sized businesses. It documents the state of your IT across eight areas: from network, server room and servers to workstations and user accounts, through to email, domain and the technical measures relevant to GDPR.

The results are prepared in plain language and presented in person: documented findings and a prioritised action plan, on request as an independent second opinion alongside your existing IT partner.

Sound familiar?

If any of these questions has ever crossed your mind, the IT Check is built exactly for that. Including as an independent second opinion when you want to know whether everything really is in order.

Are we actually secure, or just hoping we are? Would we even notice an attack? What if all our data is encrypted tomorrow? Does our backup really work when it matters? Who actually has access to our data? How easy are we to find for attackers online? Would our business survive a hack? Would we know what to do in the first hour of an emergency? Is our IT provider doing a good job, or are we just trusting our luck? Did we invest in the right security? Would our IT hold up to a review by an insurer or customer? When did someone from outside last check this?

What you take away from the IT Check

Three deliverables you can work with directly.

Documented findings

The current state of your IT, audited against over 100 checks in eight areas and presented in plain language.

Personal presentation

We walk you through the results in person, on site or remote. On request together with your existing IT partner.

Prioritised action plan

Concrete next steps, ordered by urgency and effort. You decide what to implement and with whom.

What we check for you

A clearly scoped standard audit with over 100 checks across eight areas, covering the key technical building blocks and a few organisational ones, without dragging on for weeks.

01 · Network & Internet

  • Firewall: configuration, rule set, version and secure remote access (VPN)
  • Wi-Fi: encryption and clean separation of company and guest network
  • Network switches: condition, hardening and separation of sensitive areas
  • Internet connection and network documentation

02 · Server Room & Power

  • Access, general condition and environment (climate, fire and water protection)
  • Uninterruptible power supply (UPS) including orderly server shutdown

03 · Servers & Backup

  • Server hardware: age, condition, warranty and storage headroom
  • Operating system, security updates and known vulnerabilities
  • Programs and services running on the server and their licenses
  • Backup concept: runs, offsite copy and tested restore
  • A backup copy that ransomware cannot delete or encrypt

04 · Workstations & Mobile Devices

  • Security updates and virus protection on the devices
  • Disk encryption, local admin rights and screen lock
  • Phones and tablets: management, encryption and remote wipe
  • Handling of personal devices (BYOD) and USB media

05 · User Accounts & Permissions

  • Overall analysis of your user directory (e.g. Active Directory) with a risk score
  • Active, inactive and orphaned accounts, such as former staff
  • Two-factor login, password rules and administrator rights
  • The process when people join, move or leave

06 · Email & Domain

  • Protection against spoofed senders in your name (SPF, DKIM, DMARC)
  • Encrypted sending plus spam and malware filtering
  • Risky forwarding rules and clean DNS records
  • Secured domain management, so nobody can take your domain away

07 · GDPR: Technical Measures

  • Which of the technical measures relevant to GDPR are in place (encryption, access control, logging)
  • Where personal data resides and whether a deletion concept exists
  • Whether these measures are lived day to day, not just on paper

08 · Add-ons

Not part of the standard check, bookable on request.

  • Cloud check
  • Phishing simulation
  • Network inventory

Need a NIS2 supplier evaluation or a gap analysis against DORA, NIS2 or ISO 27001? We handle that separately in the compliance area. Go to compliance overview →

More details on the process and the areas we check are in the PDF.

IT Check print version (PDF)

How the IT Check works

Kept lean, so your business keeps running.

First call

A short call to clarify how your business works and what matters.

Confidentiality

We sign a confidentiality agreement (NDA) before anything starts.

Access

You give us the access we need to your systems.

On site analysis

One to five hours on site, depending on size. Your business keeps running as normal.

Evaluation

We evaluate everything carefully. This takes up to 14 working days.

Findings and presentation

You get the findings and we present the results to you.

Common questions

How long does an IT Check take?
The IT Check is deliberately lean. There is usually only a short span between the first call and the finished report, and your business keeps running throughout.
Do we have to commit to anything afterwards?
No. The IT Check is a standalone step. You get a clear verdict and then decide in your own time what to act on and whether to do it with us or on your own.
Who is the IT Check for?
For mid sized businesses that want to know where their IT security stands. It is especially useful for companies that work with sensitive data or have lost the overview over time.

Ready?

Know where you stand

Start with an IT Check. A short call is all it takes to get going.

Price from 1 299 € excl. VAT
Request an IT Check