Improve
Security baseline and uplift
Find the gaps, fix what matters, prove it is done.
We work out where your business stands, agree what to fix first, make the agreed changes with your IT provider, check they worked and hand you the evidence. An ongoing service can then keep it that way.
Request a quote- Price
- Quoted on scope
- How you can engage us
- One-off project · Ongoing service · Project, then ongoing
- Delivered by
- Cyber Guys
- Review cadence
- Quarterly when continued as an ongoing service
Who it is for
Small and medium businesses on Microsoft 365 or Google Workspace that want a defensible security baseline without becoming security experts.
Scope
Your email and identity platform, staff accounts and administrator access, email security, managed devices, patching, and backup and recovery arrangements, as agreed in the scope.
What is included
- Environment discovery: accounts, administrators, devices and key systems
- Microsoft 365 or Google Workspace security assessment
- Identity and administrator access review
- Email security review
- Endpoint posture and patching review
- Backup and recovery review
- A prioritised remediation plan in plain English
- Implementation of the changes you approve, within the agreed scope
- Verification of each change, with the evidence recorded
- A handover report and an evidence pack
What is not included
- Work outside the agreed scope, which is quoted separately
- Purchasing or licensing third-party software
- Hardware replacement or network rebuilds
- Penetration testing (available as a separate service)
- Incident response to an active compromise
How delivery works
- 01
Discover
We map your accounts, devices and settings, and run the plain-English baseline with you and your IT provider.
- 02
Prioritise
We explain what we found and agree a short list of changes, in order, with the business impact of each.
- 03
Implement
We make the agreed changes — or coordinate your IT provider where they own the system — inside agreed change windows.
- 04
Verify
Each change is checked after it is made. Anything that does not pass is reopened, not closed.
- 05
Maintain
Optional: an ongoing service reviews the controls on a schedule and flags anything that changes.
Who does what
You
- Name a decision-maker who can approve changes
- Provide administrator access through a named, least-privilege account (never by sharing a password)
- Approve or decline each proposed change
- Tell us about business systems or workflows a change might affect
Cyber Guys
- Run the assessment and explain the findings
- Plan each change with its business impact and rollback
- Make or coordinate the agreed changes
- Verify each change and record the evidence
- Report what was done, what was verified and what remains
Your IT provider or partner
- Your IT provider, where they manage a system, makes or approves changes to it and confirms the result
Access we need
- A named administrator account for the engagement in Microsoft 365 or Google Workspace, created by you or your IT provider
- Read access to device management and backup consoles where they exist
We never ask for your password. Access is through a named account that you or your IT provider create for the engagement, and can remove at any time.
Dependencies and licences
- Some controls depend on your Microsoft 365 or Google Workspace licence; we tell you before proposing a change that needs one
What you receive
- Baseline findings
- Prioritised remediation plan
- Change log with verification results
- Evidence pack
- Handover report
How we know it is finished
- Every agreed change is verified, failed and reopened, or recorded as an exception you accepted
- The handover report and evidence pack are delivered
Related services
Microsoft 365 security
Secure your Microsoft 365 tenant without breaking how your business works.
Quoted on scopeRequest a quoteGoogle Workspace security
Configure Google Workspace securely, around how your team works.
Quoted on scopeRequest a quoteEssential Eight uplift
Know your Essential Eight maturity, and lift it to the level you choose.
Quoted on scopeRequest a quote
Request a quote for Security baseline and uplift
Tell us a little about your business. We will arrange a short scoping call to agree what is in scope and send a written quote. The call is about scope and price — it is not free security advice.