Working with your team
Assessments are carried out with your internal team, MSP and other providers involved where needed. Findings are written so whoever delivers the remediation can act on them.
IT & Cybersecurity Assessments
Cyber security assessment services establish how well your technology, security controls and governance actually work, measured against your risks or a framework such as the Essential Eight, ISO/IEC 27001 or SMB1001. Umbrella Tech assesses Australian organisations that are unsure where they stand, are facing a major change or must demonstrate a requirement. You receive evidence-based findings and a prioritised roadmap for practical improvement.
A practical starting point
An assessment is the right first step when the environment is unclear, a major change is coming or a customer, contract or framework asks you to show your position. We agree the scope before investigating and make the next steps explicit.
Not sure where to begin? Start hereNetwork & Firewall AssessmentA firewall audit examines the rules, access paths and configuration protecting your network.Explore Network & Firewall Assessment
Explore Assessments & Roadmaps
Start here
Network & Firewall Assessment
A firewall audit examines the rules, access paths and configuration protecting your network.
Explore →Technology & Infrastructure Review
An IT infrastructure review establishes how well your core systems support the organisation's current and planned needs.
Explore →Cybersecurity Assessments
An IT security assessment of how well your systems, people and processes protect the information you depend on.
Explore →Microsoft 365 Environment Review
A review of how your Microsoft 365 tenant is configured, secured, governed and used.
Explore →AI Readiness Assessment
Whether your data, systems, governance and people are ready for controlled AI adoption.
Explore →SMB1001 Readiness Assessment
Your current position against the SMB1001 cyber security standard for small and medium businesses, and the work needed to prepare.
Explore →Essential Eight Assessment
Your current maturity against the Essential Eight mitigation strategies published by ASD's Australian Cyber Security Centre.
Explore →ISO 27001 Gap Assessment
Compares existing arrangements with ISO/IEC 27001, the international standard for information security management systems.
Explore →ISO 42001 Gap Assessment
Compares existing arrangements with ISO/IEC 42001, the international standard for AI management systems.
Explore →DISP Readiness Assessment
Your readiness for the Defence Industry Security Program (DISP) security requirements and the work needed to prepare.
Explore →RFFR Readiness Assessment
Your readiness for the Right Fit For Risk (RFFR) requirements that apply to some government employment services providers.
Explore →IT Strategy & Roadmaps
IT strategy connects business priorities with the systems, capabilities and investment needed to support them.
Explore →How we deliver
How an assessment runs
01
Agree the scope
Confirm the questions to answer, the systems in scope and any framework to measure against.
02
Gather evidence
Review configuration, documents and records, and speak with the people responsible.
03
Prioritise
Rank findings by risk and effort, and explain the business impact of each.
04
Plan the roadmap
Set out a practical sequence of improvements and who can deliver them.
What to expect from an engagement
A written scope, read-only access where possible, findings backed by evidence and a roadmap with clear priorities. Assessments describe readiness and gaps; they do not certify or audit you against a standard.
Frequently asked questions
What does Umbrella Tech provide for cyber security assessment services?
Scoped assessments of security controls, infrastructure, Microsoft 365, AI readiness and framework readiness, each ending with findings and a roadmap. We can also deliver the remediation if you choose.
Who are these assessments for?
Australian organisations that need an independent view of their position, are preparing for a framework, contract or certification audit, or are planning major technology change.
What outcomes should an assessment deliver?
A clear current-state picture, findings ranked by risk, a practical remediation sequence and enough evidence to make funding and priority decisions.
Start with the right question
Tell us what needs to change, what the organisation depends on and any requirements you need to demonstrate.