Loading
Cyber resilience
Cyber resilience
Most organisations can list their security controls. Far fewer can show that each one is designed properly and works in practice. A security control assessment closes that gap: every control in scope is tested against evidence, not taken on trust. We assess against the framework your obligations name: the ASD’s Information Security Manual (ISM), ISO/IEC 27001 Annex A, NIST SP 800-53, the Essential Eight or ASD Essentials, IEC 62443 for industrial systems, or your own control library.
Cyber resilience
Each control rated effective, partly effective or not effective, with the evidence.
27
effective
8
partly effective
3
not effective
38 controls assessed. Illustrative example.
Cyber resilience
Agree the system, the boundary and the control set.
Documents, interviews and configuration exports, gathered with as little disruption as possible.
Each control checked for design and operation, with evidence recorded as we go.
The assessment report, the plan of action and a briefing for your leaders.
Cyber resilience
Cyber resilience
No. IRAP assessments are carried out by ASD-endorsed IRAP assessors. A security control assessment uses the same evidence-based approach to tell you where you stand, and it is often how organisations prepare for an IRAP assessment or a certification audit.
Goes well with
Free · No obligation
A 30-minute call with a senior consultant, then a written summary of your top risks. No cost and no obligation.
Prefer to talk? Call 0422555187 · Use the full form