SECaaS.IT Security Health Check
Your current status, before you commit.
The Security Health Check is a time-limited review of your IT security and compliance situation: we capture the current status in a structured way, evaluate it against the relevant requirements and show how large the gap is to the next level. Without requiring you to commit to a standard first.
We have already conducted this health check for customers — as a structured, traceable entry point for companies that want a verified overview before committing to a full certification.
How the health check works
A health check typically takes one to two weeks, depending on scope and availability of your contacts. Exact effort and prices are clarified in the initial call.
Kickoff & Scoping
We jointly define which areas and systems are reviewed and which frameworks are relevant — ISO 27001, C5, NIS 2 or others.
Current status capture
We review existing policies, processes and technical evidence. Missing information is gathered in short, targeted conversations with your contacts.
Gap assessment with PRISM
The current status is evaluated against the standard chapters — including AI-supported policy assessment where documents already exist. Results land directly in your PRISM environment, not in a one-off file.
Results report with prioritised actions
You receive a structured report: what is already in place, what is missing, and in what order closing the gaps is most worthwhile.
Optional: transition to Guided or Certified
If you decide on the full certification path afterwards, we carry over the scoping, gap status and actions directly — you do not start from zero.
Who the health check is for
- You do not yet know whether ISO 27001, C5, NIS 2 or another framework fits you.
- A customer or tender requires a reliable statement about your security status at short notice.
- You need a verified figure on the scope of the gap before a larger certification project — for budget or management decisions.
If you already know which standard you need and want to go straight into a full certification project, Guided or Certified is probably the faster path for you.
Options
Health Check — or a condensed workshop?
Depending on your starting point and timeline, we recommend one of two options.
Standard
Security Health Check
1–2 weeks, structured. Current status capture via conversations and document review, gap assessment with PRISM, written report with prioritised actions. Recommended when you need a reliable statement or a budgeting basis.
- Review of policies, processes, technology
- AI-supported gap assessment in PRISM
- Structured report with prioritisation
- Transition to Guided/Certified possible
Condensed
Half-Day Workshop
Half a day — remote or on-site. We structure your current status together, show live in PRISM where the gaps are, and leave with a prioritised action list. Ideal for companies that need a decision basis quickly.
- 4 hours — remote or on-site
- Live assessment in PRISM
- Prioritised actions as outcome
- No long lead time, bookable at short notice
Let's talk about your current status.
In the initial call we clarify the scope, process and price of your health check — without obligation and concretely tailored to your situation.