020 3866 1180

Book a free consultation

IT assessments and IT audits

Find out what your estate is actually carrying, before it finds you

A fixed scope review of your IT estate that tells you what is there, what is exposed, what is costing more than it should and what to do about it first. Security, infrastructure, Microsoft 365 and AI readiness, in whatever combination fits the question.

You get a ranked plan rather than a list of findings, and nothing in it depends on buying anything from us.

Book a free consultation
  • ISO 27001 information security
  • ISO 9001 quality management
  • Cyber Essentials Plus
  • Enterprise and public sector delivery
  • Leeds based, national reach
When people ask for one

Usually because somebody has asked a question nobody can answer

It is rarely curiosity. Something has forced the question and the honest answer is that nobody currently knows.

  • A client questionnaire or tender. It asks what you patch, who has access and how fast you recover, and the answers have to be evidenced.
  • An insurer or auditor. Renewal now depends on controls somebody has to prove are in place.
  • A new IT lead. They have inherited an estate and need an independent baseline before they own the risk.
  • A near miss. Something nearly went badly wrong and the board wants to know what else is sitting there.
  • Costs have crept. Licences, cloud and contracts have grown and nobody can see the shape of it.
  • AI is on the agenda. Before anything is built, somebody needs to know whether the data and access model can take it.
What we assess

Six areas, taken separately or together

Open the ones that match the question in front of you. Most assessments cover two or three.

  • Security and cyber postureWhere an attacker would actually get inPatching, endpoint protection, identity, privileged access and segmentation, checked against the controls your insurer and auditors ask about rather than a generic checklist.
  • Infrastructure and networksWhat is holding it up, and what is holding it backServers, storage, connectivity and the single points of failure that only get noticed during an outage. Includes what is out of support and what is quietly close to capacity.
  • Microsoft 365 and identityWhat you pay for versus what you useLicensing, security baselines, sharing and retention. Most estates are paying for capability they already own and have never switched on.
  • Backup and recoveryTested, or only assumedWhat is backed up, what is not, and whether anybody has proved a restore recently. The gap between the RTO on paper and the one you would actually get.
  • Cost and contractsThe spend nobody ownsLicences, cloud consumption, renewals and overlapping tools, with the lines that are costing more than the thing they replaced.
  • AI readinessWhether your data can take it yetData classification, access control and governance, so you find out what has to be true before AI touches anything, not after. Human led, AI augmented.
How an assessment runs

Fixed scope, fixed price, no disruption

Scoped and priced before it starts, run around your working day, and finished with something you can act on.

  • 01

    Agree the question

    A short conversation to establish what has prompted this and which areas are actually in scope. If you do not need a full assessment we will say so.
  • 02

    Collect the evidence

    Read only discovery across the estate, plus the documentation and contracts. Nothing is changed and nothing is taken offline.
  • 03

    Talk to the people who run it

    The constraints that matter are rarely written down. Half an hour with the team usually explains more than a week of tooling.
  • 04

    Rank it by risk and cost

    Findings ordered by what it would cost you if it happened and what it costs to fix, not by severity score alone.
  • 05

    Walk you through it

    A session with the report, so the people who have to fund it and the people who have to do it hear the same thing.
What you end up with

A plan with an order to it, not a list of problems

Tailored to the scope, but typically some combination of:

  • Current state of the estate, with risks ranked by impact rather than just listed
  • Security posture against the controls your insurer, auditor or client actually asks about
  • What is out of support, close to capacity or missing a tested recovery path
  • Microsoft 365 licensing and baseline review, including capability you already own
  • Cost and contract findings, with the renewals worth challenging
  • AI readiness view covering data classification, access and governance
  • A prioritised remediation plan with effort and sequence
  • A short written summary your board can read without a translator
Why InfraTech

We run estates as well as assess them

  • We have to live with our own findingsWe run managed services for organisations like yours, so we know which recommendations look sensible on paper and painful at two in the morning.
  • No product at the end of itIf the honest answer is that your estate is in decent shape and two things need fixing, that is what the report says. You can hand the work to us or to somebody else and the findings stand either way.
  • Read only, and out of your wayDiscovery does not change anything and does not take systems offline. Your team carries on working while it runs.
  • Evidence your auditors can useISO 27001, ISO 9001 and Cyber Essentials Plus behind the work, and a place on the Government Commercial Agency (GCA) supplier list. Ask to see any of it.
  • The AI side is in the same buildingWhere the question is really about AI readiness, the people who do that work are down the corridor rather than a subcontractor.
  • Find out what is actually thereScope, price and timescale agreed before anything starts, and a plan you can act on whoever ends up doing the work.Book a free consultation
Start with the question

Find out what your estate is carrying

One conversation, no obligation. We will tell you whether you need a full assessment, a look at one area, or nothing at all.

Related: Cyber Security for the controls themselves, Backup and Disaster Recovery for tested recovery, and IT Consulting where the question is a bigger architecture decision.

Book a free consultation
close menu icon

Book Today

Please fill in the form below to get started

close menu icon

Download Guide

Please fill in the form below to get started

Update cookies preferences