An independent IT security audit.
Who asks.
Partners and owners of firms trusted with other people's sensitive information, in finance, wealth management and R&D. Usually with an IT provider they have trusted for years, and a feeling that nobody independent has looked in a while. Often with a new tool already connected and no clear idea of what it can reach.
What we look at.
- Where the sensitive information lives: email and attachments, files, the practice system, backups.
- Who and what can reach it, including the AI tools and note takers you have connected.
- Whether the backups exist outside the recycle bin, and whether a restore has ever been tested.
- How credentials travel, and who still has access who should not.
- The vendors already inside, and what you depend on them for.
- What you want to build next, and whether what you have can carry it.
What you get.
- A written verdict you keep, for clients, insurers and anyone who asks later.
- What to fix first, and what can wait.
- A brief for your IT provider, written so they can act on it.
- The architecture for what you want to build next, when that is why you called.
How it goes.
A conversation
How the firm works, what worries you, and what you want to be able to say yes to.
The check
Read-only access you approve, limited to what the job needs. We talk to your people, read the systems, and test what can be tested.
The verdict
Written, every finding rated, and a call to walk it through with the partners.
After
Your IT provider fixes what needs fixing, or our collective does. We come back when you want us to.
Questions.
Will our IT provider mind?
The good ones welcome it. We are a second pair of eyes, and we hand them the fixes in their own language. They keep running things; we never take that over.
What do you need from us?
An NDA, read-only access you approve, an hour with the people who run things day to day, and the contracts you have with your providers. We see only what the job needs and keep none of your clients' information.
Can our people keep using the tools they like?
Usually, yes. Most of what we find is a setting, a permission or a habit. We show what each tool can reach and help you keep the useful ones safely.
- 18Companies we have worked with
- 7Of them have exited
- 13Years at it
- $100M+In transactions through systems we kept safe
Tell us about your firm.
How many people, which systems, and what prompted the call. We reply within two working days with what we would look at and a quote.
The first conversation costs nothing. Or write to us at hey@notacompany.com.