Protect · Threat Protection · Fixed-scope assessment
Cloud & Microsoft 365 Security Assessment
Most cloud breaches start with configuration, not exotic exploits: an identity with too much access, a sign-in without multi-factor authentication, logging that was never switched on. We assess your estate against recognised baselines and give you a short, ranked plan to close what matters.
Talk to us about this
Who it is for
Organisations on AWS, Azure or Microsoft 365 that want an outside view before an audit, a funding round, a security questionnaire or a cyber insurance renewal.
What is included
- Identity and access: administrator accounts, multi-factor authentication, conditional access, roles and privilege
- Logging, monitoring and alerting coverage
- Data exposure: public storage, sharing settings and external access
- Network and perimeter configuration
- Backup and recovery readiness
- Benchmarking against CIS and NCSC guidance
What you get
- An executive summary for leadership
- A ranked findings register with the fix for each
- A remediation plan you can run yourselves, or that we can deliver
Why Cipherer
- Principal-led. The person who scopes the work does the work, with no hand-off to a junior team.
- SC-cleared principal consultant (National Security Vetting), and a Cyber Essentials certified company.
- Seventeen years of delivery across government, healthcare, banking and Web3, including an organisation-wide cyber security programme for the Scottish Government.
- Security by design in everything we build and run, from a community website to a bank's data platform.
- One partner from advice to operation, based in Scotland and working across the UK.
Every engagement starts with a short call to agree scope, then a written proposal setting out deliverables, timeline and price.