A productised, 2-week independent posture review. Defined scope, defined deliverables, real artefacts you can take to the board, your insurer, or your customers.
The Cyber Health Check is the lowest-friction way to start working with Portcullis Security. It is a fixed-scope, fixed-duration engagement that produces a real artefact — a board-ready document that tells you exactly where you stand, where the gaps are, and what to do about them over the next twelve months.
It is independent, evidence-based, and assessed against a recognised framework — either NIST CSF 2.0 or the ACSC's Essential Eight, depending on what makes sense for your context. No sales pitch dressed as advice. No vendor recommendations driven by commission. Just an honest assessment from someone who has sat in the CISO chair.
The Health Check is the right starting point if any of the following describes your situation:
Your insurer, an enterprise customer, or your board has started asking harder questions about cyber. You need a credible independent answer, fast.
You know cyber matters but have no formal programme, no baseline, and no roadmap. You need someone senior to look at everything and tell you the truth.
You're thinking about ongoing security leadership but want to test fit before signing a retainer. The Health Check is a structured, time-bound way to do exactly that.
New CTO, new CIO, post-acquisition, post-incident — you've inherited an environment you didn't build, and you need an independent baseline before you decide what to do next.
An independent assessment of your current security posture mapped against a recognised framework. Evidence-based, not opinion-based — every finding traced back to documentation, configuration, or observed practice.
A single-page visual showing your current state across each domain — green for sound, amber for partial, red for absent or broken. The artefact you can put in front of a board, an insurer, or an enterprise customer to answer the "where do we stand?" question without ambiguity.
The risks that genuinely matter, ranked by likelihood and impact in your context — not generic threats from a textbook. Each one annotated with what it would take to address it, in business terms.
A sequenced, costed plan for the next twelve months. Quick wins in the first 30 days, foundational work over months 2–6, strategic uplift over months 6–12. Designed to be executable whether we work together afterwards or you take it in-house.
A 2-page document written for a non-technical audience that translates the findings into business risk language. Cyber risk in the words boards, insurers, and customers actually use.
Kickoff call to scope and access. Documentation review — policies, architecture, prior audits, incident history. Stakeholder interviews — leadership, IT, security, key business owners. Control assessment against the chosen framework. Evidence gathered, gaps identified.
Risks ranked and roadmap built. Scorecard finalised. Executive summary drafted. Walkthrough session to present findings — typically with leadership and the IT/security team together. Final artefacts handed over with a recommendation for what comes next.
The Health Check is deliberately built so you have options at the end. We are not selling you into something. The point of the engagement is to give you the clarity to choose.
You have the team and capability to execute the roadmap yourselves. We hand over the artefacts, you run with them. No ongoing relationship required.
The roadmap surfaces a specific deliverable — ISO 27001 readiness, Essential Eight uplift, IR planning — that maps to one of our productised packages. We deliver that, then we are done.
You want ongoing senior security leadership to drive execution and own the programme. The Health Check becomes the baseline for an ongoing vCISO retainer.
The Cyber Health Check is the right first step for most businesses. It is structured, time-bound, low-commitment, and produces real artefacts you can use whether we keep working together or not. Book a discovery call and we can talk about whether it is the right fit for your situation.
Request a Tailored Quote