I will provide security audit and risk management services

Your systems have weak points. The only question is whether you find them first, or someone else does.

I run security audits and risk assessments for small and mid-sized businesses. I examine your infrastructure, applications, access controls and policies, then hand you a report your engineers can act on and your board can actually read.

What you get:

• A findings register every issue severity-scored using CVSS v3.1
• Each finding mapped to ISO 27001, NIST CSF, CIS Controls and PCI DSS
• Business impact written out, not just technical detail
• A 30/60/90-day remediation roadmap with owners and effort estimates
• A free retest on the Premium package once you've remediated

Typical work: external attack surface reviews, configuration audits against CIS Benchmarks, identity and privileged access reviews, logging and monitoring gaps, backup and recovery checks, and security policy and governance reviews.

Before I start I'll need your in-scope asset list and written confirmation that you're authorised to have those systems tested.

I assess alignment against these standards I am not an accredited certification body.

Message me with your setup and I'll tell you which package fits.