Show the basis.
Findings trace back to reviewed evidence and business context.
Cybersecurity consultingFor small & midsize businesses
Inside an assessmentIllustrative example
What the review found
Recovery confidence needs evidence.
In our fictional sample assessment, recent restore-test evidence was not available for review.
A missing record is a limit on what we can conclude. It is not proof that recovery will fail.
Read the sample report (PDF, opens in a new tab)
Fictional company. No client information.
A closer look at the assessment Defined scope. Reviewed findings. Clear next steps.
The expertise behind the assessment
Technical experience.
Personal accountability.
AegisPrime is a military veteran-owned cybersecurity consultancy led by a CISSP-certified cybersecurity engineer with more than 10 years of industry experience.
Start a conversation- CISSP
- Certified Information Systems Security Professional
- 10+ years
- Industry experience in cybersecurity
- Veteran-owned
- Military veteran-owned business
01 / The differenceBeyond a checklist
A finding is only useful
if you can understand
what’s behind it.
A checklist can tell you what to ask. An assessment should tell you what the evidence supports, why it matters to your business, and what to do about it.
Inside our approachName the unknowns.
An observed weakness and a lack of proof are different. Your report makes the distinction.
Make the next step clear.
Recommendations include priorities, suggested ownership, effort, and dependencies.
02 / The work you take awayStandard Assessment
Clarity, in writing.
Direction, in practice.
Your assessment report explains your security position. Your improvement plan sets out what to do next. Two documents, connected by the same finding references.
01 / Understand your position
Security Readiness
Assessment Report
A clear account of the assessment: what was reviewed, what was found, and why it matters to your business.
- Executive assessment & priority risks
- Agreed scope & assessed domains
- Detailed findings, business risk & recommended actions
- Contributing checks & assessment limitations
02 / Decide what happens next
Security
Improvement Plan
A practical plan for addressing the findings, with recommended ownership, effort, and timing.
0–30days31–90days3–6months6–12months
- Prioritized action register linked to findings
- Suggested owners, effort & target timing
- 12-month roadmap & recorded dependencies or limitations
Public samples are fictional illustrations of content, not client results or final document layouts.
Inside the two documents03 / A connected view
Your security
is bigger than
one setting.
The Standard Assessment looks across ten core areas in one defined environment. Representative evidence and stakeholder context keep the review practical.
Explore the assessment scope01Identity & access
Who can sign in, how accounts are protected, and who holds administrative access.
02Email security
Protection against impersonation, risky forwarding, and unwanted access to email.
03Device security
Device protection, updates, encryption, and administrative privileges.
04User lifecycle
How access is granted, reviewed, and removed when people join or leave.
05Backup & recovery
What is backed up, who owns recovery, and what restore evidence is available.
06Core policies
Whether key security procedures are current, documented, and owned.
07SaaS governance
Ownership, access, and sensitive data handling across business applications.
08Third parties & vendors
How external access, contractors, and data sharing are managed.
09Security awareness
How staff learn to recognize concerns and report security incidents.
10Asset inventory
Visibility into devices, systems, cloud assets, and their business owners.
04 / Start with your situationScope before commitment
What brought
you here?
A customer asking for assurance. A business that has grown. An IT budget that needs direction. Start with the decision you need to make; we’ll help define the review.
Have an IT team or provider already?
The assessment can work with your existing IT support to review evidence and clarify priorities. It gives leadership a decision-making tool and your technical team a plan to work from.
Standard Assessment
Ten core areas. An assessment report. An improvement plan.
Focused Readiness Review
Up to three priority areas. Scoped findings, next steps, and a follow-up call.
Broader scope or a tighter timeline? Expanded and Expedited options are available by fit.
Compare engagementsAdvice with clear boundaries.
We assess readiness and recommend improvements. Implementation requires separate written approval. The assessment does not provide penetration testing, managed monitoring, or compliance certification.
Working with your information
Trust starts before
you share a file.
You should know what is being requested, why it is needed, and how it will be handled before sharing assessment evidence.
Discuss your handling requirementsStart with a conversation.
Your initial inquiry only needs business context and contact details. Keep passwords, screenshots, exports, and sensitive records out of the form and introductory emails.
Agree the scope before sharing.
Evidence requests follow the agreed assessment scope. We agree a transfer method first and request only what is needed, using summaries, redacted material, or representative samples where practical.
Know where the evidence goes.
Assessment evidence is stored on premises with encryption. Access is limited to the owner of AegisPrime. Client information is used for the assessment and related work you approve.
Website inquiries are processed through Google. The inquiry form is for first-contact details; it is not an evidence-transfer channel.
The next step is a conversation.
Tell us what prompted the question.
We’ll discuss the scope, the fit, and the way forward.