IT & Security Health Assessment Overview

An initial Retrisa IT & Security Health Assessment is intended to help identify potential technology, administration, security, backup, access and operational gaps — and to describe them in language a business owner can act on.

Depending on your environment and what has been authorized, a review may cover:

• Users, accounts and group membership;
• Multi-factor authentication coverage and access policies;
• Privileged and administrative accounts;
• Devices: inventory, encryption, patch state and management coverage;
• Email configuration, including mail authentication records and phishing defenses;
• File sharing, permissions and external sharing settings;
• Backup configuration, success history and whether restores have been tested;
• Endpoint protection coverage;
• Remote access and network exposure; and
• Licensing already paid for but not in use.

Organizations that have outgrown ad-hoc IT and want an honest picture of where they stand: businesses changing providers, businesses that have never had a structured review, businesses facing an insurance or customer security questionnaire, and leadership teams who simply want to know whether the technology they depend on is in good shape.

1. We review what you sent and follow up using the contact details you provided.
2. We have a short conversation to understand your environment and what matters to you.
3. We agree the scope in writing, including exactly what we will look at and how.
4. You grant the access required for that agreed scope — nothing more.
5. We carry out the review and document what we find.
6. We walk you through the findings and a prioritized list of what we would do first.

Submitting a request does not create a customer relationship and does not obligate you to purchase anything.

Submitting a request does not authorize Retrisa to access, scan, test or modify any system.

Any technical access or testing requiring authorization will only occur after appropriate permission and scope have been established in writing. Retrisa does not conduct unauthorized access, scanning or testing against any system.

Unless specifically agreed otherwise in writing, an initial assessment is not:

• A penetration test;
• A formal vulnerability assessment;
• A compliance audit;
• A legal or regulatory certification;
• A forensic investigation; or
• A guarantee that an environment is secure.

Recommendations are based on the information and authorized access available at the time of the assessment.