A practical first step · no system access to inquire

Cybersecurity Control Review

Know which controls need attention, where evidence is missing and what to scope next. For growing organizations with sensitive information, compliance pressure and an IT team or MSP already in place.

Request your Control Review →

The initial scoping conversation is free. Any technical assessment, deliverables and fees are agreed separately before work begins.

Cybersecurity risk assessment — at a glance

Best forBusinesses preparing for customer reviews, cyber-insurance renewal, compliance work, growth, provider changes or a broader security program.
Areas we can assessIdentity, Microsoft 365, endpoints, encryption, vulnerabilities, email, backups, incident readiness, vendors and evidence.
DeliverablesScope-dependent findings, risk/control gaps, remediation priorities, owners, evidence and documented exceptions.
What it is notA Control Review is not automatically a penetration test, legal certification or full HIPAA risk analysis unless specifically scoped that way.

Your environment

Discuss team size, core systems, sensitive data and how IT is supported today.

Your priorities

Identify concerns around endpoints, identity, Microsoft 365, remediation and evidence.

Your next step

Agree whether a focused review, broader risk assessment or managed service is the right fit.

From a conversation to a scoped assessment.

First: define the question

Tell us what prompted the review: a customer questionnaire, insurance renewal, audit, business change or uncertainty about current controls. No passwords or sensitive records are needed.

Then: agree the work

A technical review can examine approved systems and evidence. A broader cybersecurity risk assessment considers assets, threats, vulnerabilities, business impact and existing safeguards. The scope and deliverables are agreed in writing.

Areas we can scope together

  • Identity, MFA and privileged access.
  • Endpoint inventory, protection, encryption and patching.
  • Microsoft 365, email and approved sharing.
  • Vulnerabilities, remediation and control verification.
  • Recovery evidence, vendor responsibilities and incident readiness.
  • Compliance gaps, policies and customer-facing evidence.

A preliminary control review does not automatically constitute a complete HIPAA risk analysis, penetration test or compliance audit.

Not sure whether you need an MSP, MSSP or vCISO? Read the comparison →

Tell us what you want to improve.

Include your approximate employee count, existing IT support and the priority driving your request. We will follow up to discuss fit and scope.

Your details help us respond to your request. Campaign information may be saved with your inquiry. No newsletter signup or resale.

Do not submit patient records, customer files, credentials or confidential security reports. See our Privacy Policy.

What happens after I submit?

NCB Cyber will follow up to arrange the initial conversation. We will discuss your objectives and agree any assessment scope before requesting access or starting technical work.

Is the assessment free?

The initial scoping conversation is free. This page does not promise a free technical assessment. Any subsequent work, deliverables and fees will be agreed in advance.

Can you help implement the findings?

Yes. Agreed remediation can connect to CyberGuard managed cybersecurity, Cyber Compliance or Virtual CISO support, depending on your needs.

Explore the three solutions · Prefer a general consultation?