CYBERSECURITY ASSESSMENT+

KNOW WHERE YOU STAND

A practical, independent assessment of your organisation’s cybersecurity position, designed to identify meaningful exposure, recognise what’s already working and give you a clear, prioritised path forward.

START AN ASSESSMENT

START WITH UNDERSTANDING +

You don’t need to know what security service you need.

Maybe you’re unsure whether your current security is enough.
Maybe your systems have grown over time and nobody has stepped back to look at the whole picture.
Maybe a client, insurer or stakeholder has started asking questions.

Or maybe you simply want an independent answer to:

Where do we stand, what actually matters, and what should we do next?

 

That’s what the Cybersecurity Assessment is designed to provide.

We look at your organisation from both a business and technical perspective, identify meaningful exposure and turn what we find into practical priorities you can actually act on.

SECURITY IS MORE THAN A VULNERABILITY SCAN.

A Cybersecurity Assessment looks at the wider picture around how your organisation operates, what it depends on and where meaningful security exposure may exist. Depending on your environment and what is relevant, we may examine:

+ BUSINESS CONTEXT

What matters to the organisation, which systems and information are important, how the business depends on technology and what a security failure could actually affect.

 

+ EXTERNAL EXPOSURE

What an attacker can discover or reach from outside the organisation, including relevant public-facing systems, domains, email posture and exposed information.

+ IDENTITY & ACCESS

How access is managed, where authentication matters, how privileged access is handled and whether appropriate safeguards such as MFA are in place.

+ ENDPOINTS & INFRASTRUCTURE

The systems, devices, networks, cloud services and technical controls that support the organisation.

+ BACKUPS & RESILIENCE

Whether important information and systems can be recovered when something goes wrong, and whether existing recovery arrangements provide meaningful protection.

+ PEOPLE & BUSINESS PROCESSES

How security intersects with everyday work, including phishing, verification, access, sensitive information and important business processes.

+ SECURITY OWNERSHIP & RESPONSE

Who is responsible when something happens, how concerns are reported and whether the organisation has a practical way to respond.

 

We follow relevance and evidence, not a giant checklist for the sake of producing a giant report.

OUR APPROACH +

Understand first. Test only where justified.

01 SCOPE

We establish what you’re trying to understand, what matters to the organisation and what should be included.

02 UNDERSTAND

We speak to the people who understand the business and technology so we can see the environment in context.

03 EXAMINE

We review relevant systems, controls, exposure, processes and available evidence.

04 VERIFY

Where appropriate, we safely verify important observations rather than relying entirely on assumptions or automated output.

05 PRIORITISE

We determine what deserves attention based on actual exposure, business consequence, existing controls and practical significance.

06 EXPLAIN

We walk you through what we found, what’s working and what should happen next.

THE RIGHT LEVEL OF TESTING +

We don't turn every assessment into an attack.

The Cybersecurity Assessment is designed to establish your security position, not quietly become a penetration test.

We may safely inspect, sample and verify relevant evidence, but the assessment does not automatically include intrusive testing, exploitation, credential attacks or disruptive activity.

If the evidence shows that deeper technical testing is justified, we’ll explain what should be tested and why.

That may lead to a focused Vulnerability Assessment or Penetration Test.

Or it may not. Every stage earns the next stage.

WHAT ACTUALLY MATTERS +

Not every finding deserves the same response.

A technically severe weakness isn’t automatically the organisation’s biggest priority. We consider the weakness alongside its exposure, business impact, existing safeguards, likelihood, practical consequences and the evidence supporting it.

Findings are translated into clear priorities:

+ ACT NOW

Issues that deserve timely attention.

+ PLAN NEXT

Important improvements that should be deliberately scheduled.

+ STRENGTHEN OVER TIME

Useful improvements that can form part of longer-term security development.

 

+ WORKING WELL

Controls or practices that are providing meaningful protection.

+ NO FURTHER ACTION

Things we examined that don’t currently warrant additional work or spending.

THE OUTCOME +

A SECURITY ASSESSMENT YOU CAN ACTUALLY USE

You won’t receive a scanner export dressed up as consulting. You receive:

 

+ CYBERSECURITY ASSESSMENT REPORT

A clear explanation of where you currently stand, what we found and why it matters.

+ PRIORITIZED ACTION PLAN

Practical recommendations organised around what deserves attention first, next and over time.

+ FINDINGS WALKTHROUGH

We take you through the findings, answer questions and make sure you understand what should happen next.

+ SECURITY BASELINE

A documented snapshot of your current position that can be used to measure future improvement and identify meaningful change.

The objective isn’t to hand you more cybersecurity information. It’s to leave you with better cybersecurity decisions.

WORKING WITH YOUR IT +

This isn’t an audit of your IT provider.

You may already have internal IT, an MSP or technology partners. Good.

Tanosec doesn’t need to replace them to provide value.

We provide an independent security perspective, helping determine whether existing controls are appropriate, where meaningful gaps exist and what deserves attention.

Where something is already working well, we’ll say so.

Where your existing provider is the right person to implement an improvement, we’ll say that too. 

 

Your IT provider manages your technology. Tanosec gives you an independent security view of it.

 

WHO IS IT FOR +

When does an Assessment make sense?

 

A Cybersecurity Assessment is a good starting point when:

 

+ You’re not sure where your biggest security risks are

+ Your technology has grown without a recent independent security review

+ Clients, insurers or stakeholders are asking security questions

+ You have IT support but want an independent security perspective

+ You want to know whether existing controls are appropriate

+ You need to prioritise security spending

+ You know cybersecurity deserves attention but aren’t sure what work should happen first

+ You want a baseline against which future improvement can be measured

 

You don’t need to diagnose your own cybersecurity problem before contacting us.

That’s part of our job.

HOW WE DELIVER +

Local by presence. National by capability.

For organisations in Bloemfontein and nearby, we prefer face-to-face engagement where practical, supported by remote technical work where appropriate. For clients elsewhere in South Africa, assessments can be delivered remotely, with on-site work where the environment or evidence justifies it. The delivery method may change. The standard of the assessment doesn’t.

 

We have served clients in Bloemfontein, Pretoria, Durban, Johannesburg, Cape Town & Namibia

KNOW WHERE YOU STAND +

START WITH UNDERSTANDING.

You don’t need a list of security products. You need a clear picture of where you stand, what matters and what should happen next. Tell us what prompted the conversation.
We’ll start there.

START A ASSESSMENT