Identity and access
Multi-factor authentication (MFA), Conditional Access in Microsoft Entra ID, privileged accounts and the joiner, mover and leaver process.
Cybersecurity Assessments
A cyber security assessment is a structured review of how well your systems, people and processes protect the information your organisation depends on. Umbrella Tech assesses identity, Microsoft 365, endpoints, networks and backup within an agreed scope, tests the evidence behind existing controls and gives you a findings register with a prioritised remediation roadmap. It suits Australian organisations that need a clear, defensible picture before they invest.
When this assessment is useful
Use an assessment when you need an independent baseline: before a security investment, after a change of IT provider, when an insurer or customer asks for evidence, or when a board wants to know which risks matter most. A growing collection of security products can still leave gaps that nobody has checked.
Assessment scope
Microsoft 365 and data
Tenant security settings, email protection, external sharing and Microsoft Defender configuration.
Endpoints and networks
Device management and protection coverage, firewall policy, segmentation and remote access.
Governance and recovery
Policies, ownership, incident response procedures and evidence that backups can be restored.
Evidence and access
Before work starts we confirm what we need to see and how it will be handled. Depending on scope, evidence may include read-only administrator access, configuration exports, architecture diagrams, account and asset records, policies and interviews with control owners.
Read-only administrator access
Configuration exports
Architecture diagrams
Account and asset records
Policies
Interviews with control owners
Findings that lead to action
You receive a current-state report, an evidence-based findings register and a remediation roadmap that separates urgent exposure from longer-term improvement. Each finding links a technical issue to its business impact, a recommended fix and a suggested owner, so the roadmap works for whoever delivers it.
Illustrative findingsExamples only
- ExampleAdministrator accounts without MFA or a clear owner
- ExampleDevices missing from endpoint protection
- ExampleBackup that has never been restored in a test
These are examples of the issues a review can examine, rather than findings about your organisation.
How it runs
Assessment method
01
Confirm the scope
Agree the systems, locations, applicable requirements and assessment methods. Identify exclusions and any testing that needs a planned change window.
02
Gather and examine evidence
Review configuration, policies and operational records. Speak with the people responsible for each control and validate important findings.
03
Prioritise and plan
Rate each finding by risk and business impact. Establish recommendations, dependencies and a practical remediation sequence.
04
Review the next steps
Walk through the findings with the responsible team. Agree what requires further investigation and what can progress to implementation.
From assessment to remediation
Agreed findings can move straight into Cybersecurity Uplift, where we design, implement and validate the fixes. Where a framework such as the Essential Eight applies, findings can be mapped to it so remediation also builds evidence.
Assessment outputFindings and remediation roadmap
Umbrella TechWe deliver the improvements
DesignImplementValidate
Your organisationYour internal team
Your partnerYour existing technology provider
Frequently asked questions
Can't see your question? Ask us directly →
What does a cyber security assessment include?
A scoped review of identity, Microsoft 365, endpoints, networks, governance and recovery, followed by a findings register and a prioritised remediation roadmap. The exact areas are agreed before work starts, so the result covers what matters to your organisation.
Is it the same as a cyber security audit or a penetration test?
Not quite. An audit usually checks against a fixed standard, and a penetration test actively tries to exploit weaknesses. Our assessment reviews configuration and control evidence and can map findings to a framework. We confirm before work starts which testing activities, if any, are in scope.
What evidence and access are required?
Usually read-only administrator access to the systems in scope, plus existing documentation, policies and time with the people who run each control. We agree the list and how information will be handled before the assessment begins.
How long does the assessment take, and what does it cost?
Both depend on the number of systems and locations in scope, how quickly evidence and access can be provided and how many people need to be interviewed. Scope, timing and cost are confirmed in discovery, before the engagement starts.
What happens after the assessment?
We walk through the findings with your team and agree what to fix first. You can engage us for remediation, use the roadmap with your own team or provider, or schedule a follow-up review to confirm progress.
Establish your current position
Tell us what concerns you most about your environment and what evidence you need to show.