Accounts & email
Microsoft 365, administrator access, multi-factor authentication, email security, and remote access.
IT, Network & Security Assessment
Understand your environment.
Prioritize the improvements.
A scoped review of systems, networks, security, and backup arrangements for growing small and mid-sized businesses.
What gets reviewed
Five connected areas.
Networks & connectivity
Firewalls, internet connections, Wi-Fi, guest and business network separation, and VPN configuration.
Computers & infrastructure
Windows computers, servers, virtualization, updates, endpoint protection, and aging or unsupported technology.
Backups & recovery
Backup configuration, available restore evidence, recovery arrangements, and business continuity gaps.
Visibility & planning
Asset records, monitoring, documentation, a basic network diagram, and opportunities to simplify your IT.
The introductory call is free. The assessment is a paid engagement, with a written scope and fixed fee agreed before work begins.
The review is tailored to your environment. Locations, systems, access, and review depth are agreed before work begins.
What you receive
A report you can act on.
Executive summary
The main concerns and recommended priorities, explained in plain language.
Evidence-backed findings
Critical, high, medium, and low findings with business impact and recommended action.
Environment overview
A basic asset summary and network diagram based on the agreed scope and available information.
30/60/90-day roadmap
A practical sequence of quick wins and planned improvements, with larger projects identified separately.
Findings review meeting
A walkthrough of the report, time for questions, and a discussion of your next steps.
30 days
Priority improvements
Address agreed priorities and practical quick wins.
60 days
Make improvements
Planned security and reliability changes.
90 days
Validate progress
Review results and plan larger projects.
Urgent risks are flagged promptly. The roadmap is a recommended schedule, adjusted to your budget and dependencies.
The process
Clear expectations from the beginning.
Understand
A free introductory call to discuss your environment and priorities.
Agree
A written proposal confirming scope, deliverables, access, schedule, and fixed fee.
Assess
Review the agreed systems and available evidence, using read-only checks wherever practical.
Prioritize
Review your report together and decide which improvements to address first.
Implementation is optional. Your report can guide your internal team or existing provider.
How findings are developed
Evidence first. Business priorities next.
Understand the business
Identify the systems your team depends on, the effect of downtime, and the decisions you need to make.
Review the evidence
Review agreed configurations, records, and available logs using read-only access wherever practical. Record access and evidence limitations.
Rank and explain
Prioritize findings by likely business impact and exposure. Explain the recommended action, effort, dependencies, and what needs validation.
Access is agreed in advance and limited to the review. Credentials should not be emailed. Evidence sharing and handling are confirmed during scoping.
See how a finding is presentedScope & questions
Know what is included.
Will the assessment disrupt our work?
Read-only checks are used wherever practical. Any testing or activity that could affect operations is discussed and agreed in advance. No changes are made as part of a standard review without agreement.
Does this include testing our backups?
The review covers backup configuration and available backup and restore evidence. Performing restore tests or recovery exercises requires a separately agreed scope, safe destination, permissions, and scheduling.
What does an assessment cost?
Pricing depends on locations, systems, and the depth of review. After the introductory call and any necessary scoping questions, you receive a written fixed-price proposal before work begins. Remediation is quoted separately.
Do we need to change IT providers?
No. You can use the findings with your current provider or internal team. There is no requirement to engage Sam’s IT Consulting for implementation or ongoing services.
What is outside the standard scope?
Active vulnerability scanning, restore tests, recovery exercises, and remediation require specific agreement and may be quoted separately. Penetration testing, formal compliance certification, daily help desk, consumer computer repair, and emergency 24/7 coverage are outside the standard offer.
Does the assessment guarantee security or recovery?
No. Findings reflect the agreed scope and evidence available at the time. The assessment identifies risks and guides improvements; it does not guarantee security, compliance, or recoverability.
Start a conversation
Get a clearer picture of your IT.
Tell me about your business and what you want to understand or improve.
Request a free introductory call