Skip to content
ZIP IT Solutions

Services

An evidence-led view of where you actually stand

A premium security assessment with clear findings, prioritised remediation, and an executive summary a business leader can use.

Request a scoping call

What's included

What it covers

Modular scope, confirmed on a scoping call. Physical and social-engineering testing are omitted unless separately agreed.

Technical & configuration

  • Identity and access review
  • Endpoint and email security posture
  • Microsoft 365 / cloud configuration review
  • Backup and recovery readiness

Framework maturity

  • Essential Eight maturity mapping
  • SMB1001-aware gap analysis
  • Privacy Act / APP-aware observations for health contexts
  • Prioritised risk narrative

Deliverables

  • Evidence-based written report
  • Prioritised remediation roadmap
  • Executive summary for business leaders
  • Walkthrough of findings

Scope boundaries

What is included, and what is not assumed

We keep the scope modular so the engagement matches your maturity and risk appetite.

In scope (core)

  • Technical assessment and configuration review
  • Essential Eight maturity
  • Reporting and remediation roadmap

Compared to the Health Check

When to choose the deeper engagement

Choose the Health Check when you want a clear first picture with low commitment. Choose the Security Assessment when you need board-ready evidence, a fuller roadmap, or are preparing for a compliance conversation.

Still unsure? Start with the Health Check or request a scoping call.

FAQ

Common questions

The Health Check is a structured, lower-commitment review. The Security Assessment is a deeper, quoted engagement with fuller evidence, reporting and a remediation roadmap suited to principals and compliance discussions.

No. We never access real patient or client data for assessment work. Reviews focus on systems, configuration and controls.

We disclose the assessor/remediator relationship openly. You can engage us for remediation, use another provider, or mix both. Your choice is clear up front.

Scope is modular. The core engagement is a technical and configuration assessment with Essential Eight maturity reporting. Deeper offensive testing can be discussed if required; it is not assumed.

Request a scoping conversation

Security Assessments are consultative and quoted. A short call confirms scope, timing and deliverables.