ProSentinel Integrated Security Assessment
You want to assess your organisation’s security but are unsure where to begin. We agree the audit scope and assess it against the available material.
One assessment with modules selected for your question and operating context. It can cover one process or several connected areas. Scope, criteria and exclusions are agreed before work starts.
01 / Choose the relevant scope
Modules are selected for the organisation’s needs, available material and our competencies. You do not need to commission every area.
What open sources reveal about the company, people and relationships relevant to its operations.
Agreed identifiers, open sources and organisational context.
An assessment of disclosures, their significance and information requiring verification.
Related service competenciesWhich signals about accounts, data and the organisation’s presence are visible externally.
Lawfully accessible external sources and client material, within agreed boundaries.
An exposure map, an assessment of signal reliability and disclosure-reduction priorities.
Related service competenciesHow the organisation verifies contacts, information requests and situations exposed to manipulation.
Interviews with agreed participants and review of information-handling rules and examples. No unagreed testing of staff.
An assessment of process resilience to social engineering and relevant team development needs.
Related service competenciesHow critical information and activities are protected, and where exploitable exposure may arise.
An agreed process, threat context, documents and interviews with responsible people.
An operational risk assessment and options to reduce exposure and dependencies.
Related service competenciesWhether the organisation can reconstruct an event, preserve relevant material and initiate an appropriate response.
Review of responsibilities, availability and retention of digital material, and preservation arrangements.
A DFIR readiness assessment, material gaps and recommendations for investigation preparation.
Related service competenciesHow decisions are supported, information is verified and the team recognises its competency limits.
Agreed examples of assessments and decisions, role allocation and team interviews.
An assessment of information and competency gaps, with further action recommended where needed.
Related service competencies02 / Process
An initial discussion and entry questions establish the purpose, processes, contacts, authorisation and boundaries.
We examine agreed documents, sources and examples, interview responsible people and record unavailable material.
We compare findings against agreed criteria, discuss discrepancies with the organisation and explain uncertainty.
We provide priorities and an improvement plan. Action owners and a date for reassessing selected findings can be agreed.
03 / Assessment
For each assessed area, we describe its state and supporting material. We do not calculate an aggregate organisational security score.
Insufficient material is recorded as ‘not assessed’; an area outside scope is ‘not applicable’. Neither is the lowest rating. The profile refers to the agreed sample and the assessment period.
Finding priority is separate from readiness: urgent decision, planned improvement or observation. The rationale considers potential impact, exposure, reliability of material and response time.
04 / Deliverable
The report can be used independently, by your own team or by a provider you choose. The audit does not require a follow-on service or training purchase. Assessing an organisation does not certify its employees.
The audit does not include a full penetration test, exploit development, a red-team operation or an offensive campaign. This product does not attempt to bypass security controls. Findings may indicate a need for a separate examination by an appropriate provider.
This is an assessment within the agreed scope of ProSentinel’s competencies. It does not certify the organisation or confirm compliance with ISO, NIS2 or other regulations. It does not replace a legal or financial audit or a full IT infrastructure examination.
Depending on the outcome, you may investigate an event, reduce exposure, plan team development or repeat a selected part of the assessment.
