HEALTH CHECK

Cyber & AI Security Health Check

A clear starting point for SMEs that want an independent view of cyber risk and how safely AI is being used across the business.

A PRACTICAL STARTING POINT

Understand where you stand before deciding what to fix.

The Health Check is designed for businesses that want a structured view of their current position without beginning with a large security transformation programme.

Cyber fundamentals

Review identity, email, devices, cloud, backups, suppliers, incidents and other controls relevant to your environment.

AI use and governance

Understand important AI tools, sensitive-data exposure, employee practices and whether clear governance exists.

Leadership clarity

Translate security observations into a concise view of the issues that deserve management attention.

Prioritised actions

Focus time and budget on practical improvements rather than trying to address everything at once.

WHAT WE LOOK AT

Broad enough to expose blind spots, focused enough to stay useful.

Identity & access

MFA, privileged access, account lifecycle and core access practices.

Email, devices & cloud

Security configuration, patching, endpoint controls and administration.

Backups & resilience

Recovery readiness, incidents, suppliers and continuity considerations.

AI tools & data

Important AI use, sensitive information, shadow AI and employee behaviour.

Policies & ownership

Security responsibilities, governance, awareness and escalation routes.

Current roadmap

Existing projects, known issues and the constraints that affect improvement priorities.

WHEN IT HELPS

Useful when you need direction, not another generic checklist.

  • Before investing in new security tools or services
  • When AI adoption is moving faster than governance
  • When customers ask tougher security questions
  • When internal teams need an independent perspective
  • When responsibilities have grown organically
  • When leadership needs a practical security roadmap

The Health Check is an advisory assessment. It is not a certification, penetration test, legal opinion or guarantee that a business is secure.

PROCESS

Four clear stages.

01

Kickoff

Understand the business, technology environment and reason for the review.

02

Assessment

Review the agreed cyber controls, AI use and supporting evidence.

03

Prioritisation

Identify the most important findings and practical improvement sequence.

04

Walkthrough

Discuss results, trade-offs and sensible next steps with management.

FAQ

Health Check questions

How long does the assessment take?

Timing depends on scope, business size and the availability of information. The assessment approach is agreed before work starts.

Will we receive a report?

Yes. The intended deliverable is a clear summary of findings, priorities and recommended next steps appropriate to the agreed scope.

Does this certify us as secure?

No. No assessment can guarantee security, and the Health Check is not a formal certification.

START WITH CLARITY

Discuss a Cyber & AI Security Health Check.

Tell us what is driving the review and we will confirm whether the Health Check is the right starting point.

Talk to ISTA