Cyber Resilience Assessment
The Cyber Resilience Assessment is a structured review of where your organisation stands on security. It gives you a risk report, a treatment proposal and a roadmap, in language your board can act on.
Book your Cyber Resilience Assessment
What the CRA covers
LIMA’s CRA assesses your organisation against up to 320 security controls, drawn from the frameworks that matter for UK organisations:
Cyber Essentials v3.3
The current version of the scheme, so you are measured against what assessors are using now rather than a version you have moved past.
ISO 27001
Specifically the controls relevant to security. We are not auditing your HR processes. We look at information governance, data security, physical and door access controls and the rest of the security-relevant estate.
ISO 42001
The AI governance framework, now fully included.
ISO 27002
Retained as a broader reference for organisations that need it.
More than a technology audit
We assess across the three pillars of cyber security.
Platform
End user computing, infrastructure, networks and hosting, plus your existing security technology.
Process
IT operating procedures, business continuity planning, threat detection and asset control.
People
Information security policies, education, and how behaviour is monitored, controlled and protected.
How it works
Session 1
A two-hour working session with your IT team covering infrastructure, configuration, access and compliance controls
Session two
A second two-hour session covering security controls and the people side, run with your security team if you have one, or as a guided session with IT if you don't
Analysis and documentation
Our team works through the findings and produces your risk report, treatment proposal and roadmap
Session three
We present the findings and recommendations back to you
What you get out of it
A risk report setting out what we found and how serious each finding is. A treatment proposal covering what to do about it. And a roadmap that sequences the work across one, two, three, five and ten years, so the whole thing is affordable rather than one enormous invoice.
The roadmap opens with any urgent, tactical work that needs doing as a priority. After that it is a matter of prioritising and mitigating long-term risk.
Why choose LIMA for a Cyber Resilience Assessment
We deliver the CRA ourselves, with consultants who spend the rest of their time designing and running IT environments. The recommendations you get are ones we know how to deliver, costed realistically, from a partner who will still be here in year three of the roadmap.
Trusted by
See our latest customer stories
