Understand your risk. Know what to fix.

Establish your baseline - Questionnaire, staff self-assessment, joiner/leaver review, user and domain inventory.

Review recent activity - 30-day analysis of mail flow, URL protection, malware/spoofing, compromised accounts and web filtering.

Prioritise the response - Written recommendations grouped into Fix Now, Fix in 30 Days and Fix Within 6 Months.

Measure readiness - Kord Cyber Readiness Check, Microsoft Secure Score, 30-day score tracking and regional / industry comparison.

Review core controls - Microsoft 365 security configuration and essential AI-security settings.

Everything included in Risk Assessment Lite - Receive the complete foundational assessment, including your cybersecurity baseline, Microsoft 365 configuration review, Secure Score analysis, essential AI security checks and prioritised recommendations.

Expanded 90-day security analysis - We extend the review of your cybersecurity activity and historical security performance from 30 to 90 days, investigating unusual events, emerging patterns and potential warning signs.

Detailed industry benchmarking - Go beyond an overall security score with a control-by-control comparison against available regional and industry benchmarks, identifying where your security measures fall behind comparable organisations.

Independent security standards validation - We assess your environment against recognised benchmarks, including business email compromise (BEC) resilience, the CIS Microsoft 365 Foundations Benchmark and Zero Trust principles.

Enhanced AI and Copilot security checks - A more detailed assessment of the settings, permissions and policies governing how AI tools interact with your business information, including checks for sensitive data that may be shared too widely.

SaaS application security review - Identify third-party cloud applications connected to your Microsoft 365 environment, review their access permissions and highlight potentially risky, unused or unauthorised connections.

Identification of technical control gaps - Receive a detailed breakdown of missing, outdated or incorrectly configured security controls, together with practical recommendations that your internal IT team or external provider can implement.

30-minute guided feedback session - Meet virtually with a Kord cybersecurity professional to review the most significant findings, ask questions and understand the recommended next steps.

Clear guidance for remediation - We'll explain which improvements should take priority and how they can be addressed, helping your business move forward with confidence.

Everything in Risk Assessment Plus - Build on the comprehensive analysis, technical security reviews, external benchmarking and guided feedback provided through our Plus package.

Tailored assessment scope - For organisations with more than 100 users, multiple Microsoft 365 tenants, several business entities or operations across different regions, we'll develop an assessment scope appropriate to your environment.

Multiple Microsoft 365 environments - We can extend the assessment across additional Microsoft 365 tenants, providing a more complete understanding of security risks and configuration differences throughout your organisation.

Executive and board-level briefings - An optional executive briefing can be arranged to present key cybersecurity findings, business risks and recommended priorities directly to senior leadership or other stakeholders.

Custom recommendations and next steps - Receive findings and practical recommendations aligned with the scale, complexity and security requirements of your organisation.

Pricing tailored to your requirements - We'll agree the scope of your assessment and provide a quotation based on your organisation's environment and needs.