Technical Due Diligence

We assess how users, administrators, and privileged access are managed across the organisation's core productivity platforms (e.g. Microsoft 365, Google Workspace, identity providers). This includes:

High-level access and security configuration review of key operational tools, such as:

We review device management practices to understand exposure from laptops and workstations, including:

A practical review of foundational security practices:

Assessment of the company's public web presence, including:

We establish a clear understanding of:

A conceptual review of the application's structure, including:

Assessment of the SaaS hosting setup, focusing on:

A non-intrusive security review covering:

We assess how customer data is handled, including:

We review how the system is built and maintained:

We conduct an in-depth review of:

A structured review of engineering practices, including:

We assess the security model at a platform level:

We review data and compliance posture, including:

Assessment of operational maturity:

We examine how technology impacts value:

Review of the human factors underpinning the platform: