Know what is protected, what is unclear, and what deserves attention first.
The Small Business Security Baseline reviews common operational safeguards such as multifactor authentication, supported endpoints, patching, managed protection, Microsoft 365 ownership, backup status, employee access, and basic response readiness.
$695starting price for up to 10 users and 15 endpoints
Final scope is confirmed before payment. Remediation, penetration testing, compliance certification, licensing, and incident response are separate.
Security becomes more useful when responsibility is visible.
Identity
Administrative ownership, multifactor authentication, recovery methods, departed-user access, and risky shared-account patterns.
Endpoints
Supported operating systems, patch routines, endpoint protection status, visibility, and device ownership.
Data and recovery
Backup responsibility, alerts, retention questions, recovery priorities, and where test restores need separate work.
Response readiness
Who employees contact, how suspicious access is contained, what records are preserved, and when outside specialists are required.
This is not a penetration test or compliance certification.
No review, tool, or provider can guarantee that an organization is secure. Legal, contractual, insurance, regulated-data, and forensic needs may require qualified specialists beyond this scope.
Share the organization, systems, and reason this matters now.
Leon will confirm whether the IT Baseline, Security Baseline, a defined project, or another specialist is the responsible next step.