QNN SolutionsFree assessment
See the gaps.
Know your next move.
A scoped review of your current environment, a findings report written in plain terms, and a prioritized action plan. Free of charge, and no obligation to continue with us afterwards.
What you get
A short, ordered list
you can act on.
Most teams already suspect where their weak points are. The assessment turns that suspicion into something specific.
- A review of the scope we agree together
- A written findings report with business impact
- A prioritized action plan, fix-first items named
- A walkthrough call to answer questions
We agree the scope first. We never ask for access credentials through this website, and we will tell you if something falls outside what we can review.
A clearer view of your environment.
- What we reviewedThe agreed scope: users, devices, cloud, network and access.
- Findings and business impactWhat we found, and why each finding matters in plain terms.
- Your prioritized action planFix-first items, next steps, and what can safely wait.
Timing
Good times to ask for one.
You are thinking about changing IT provider
An independent view of the current environment makes the handover conversation much easier.
A client or insurer has started asking security questions
Get ahead of the questionnaire with findings and a plan already in hand.
The team has grown faster than the systems
Access, devices and licenses drift quickly. A review resets the baseline.
Nothing has been checked in over a year
That alone is reason enough.
What costs nothing
Free means free.
There is no trial period, no card, and no clause that turns into an invoice. If we find nothing serious, we will tell you that too.
- The scoping call and the scope document
- The review itself, within the agreed scope
- The written findings report
- The prioritized action plan
- A walkthrough call, including advice on what you can fix yourselves
It is not ISO 27001 preparation, a penetration test, or a remediation project. Those are consulting engagements with a named consultant, scoped and quoted separately. We will tell you on the walkthrough call which of them you actually need — and if the answer is none, we will say that too.
You are free to take the report to your existing provider or your internal team. Plenty of people do, and that is a perfectly good outcome.
Where it usually leads.
- RemediationWe do the fix-first items, or support your team while they do.
- MonitoringZabbix and Wazuh set up so the next gap is spotted rather than discovered.
- Audit preparationISO 27001 internal audit preparation with a consultant, or answers for a client security questionnaire.
Each of these is quoted separately, after the assessment, with no obligation attached to the free review.
Beyond the assessment
Paid consulting engagementGetting ready
for an auditor.
If a client, an insurer or a tender has started asking about ISO 27001, the free assessment is a sensible first step. The audit preparation that follows is a separate, quoted consulting engagement — we put a consultant on it.
Gap assessment against Annex A
Where you stand today, control by control, with the clauses that usually cause trouble called out.
Policies, registers and evidence
The document set the standard expects, and monitoring data organised so evidence is produced rather than reconstructed.
The internal audit itself
Run against your ISMS, with findings and corrective actions recorded the way an auditor expects.
An honest readiness view
Whether you would pass stage 1 and stage 2 today, and what to fix before you book it.
Request your free assessment.
Tell us roughly what your environment looks like. We will propose a scope and a date.