Know what you have before deciding what to do with it
Most IT decisions are made without a proper inventory: a server is replaced without knowing what depends on it, licences are paid for devices that no longer exist, backups are assumed to work until the day a restore is needed. This audit sets out what you really have, what is reaching end of life and what exposes you.
Estate inventory: workstations, servers, systems and versions, end-of-support dates.
Backups: what is covered, what is not, and when a restore was last tested.
Email and Microsoft 365: basic configuration, multi-factor authentication, shares open to the outside.
Accounts and access: privileged and stale accounts, at a high level.
Licences and contracts: inventory, renewal dates, duplicates and unused subscriptions.
Weak points: undocumented dependencies and components whose failure stops the business.
A deliberately narrow scope: this audit is a technical review. It is not a penetration test, a compliance audit or a certification, and it does not cover the choice of business software. Exclusions are detailed in the questions below.
Who is it for?
Small and medium-sized businesses that have never reviewed their IT.
Businesses preparing an investment (device renewal, new server, migration) that want to decide on facts.
Organisations that have just inherited an IT set-up, after a change of provider or of management.
A method that does not tie up your teams
An audit that multiplies workshops with every department is expensive and tiring, often for a vague result. That is not the method used here.
Data collection relies on read-only scripts and exports from your administration consoles, completed by a preparatory questionnaire. A single two-hour technical interview, by video call, with the person who knows your IT best is then enough to clear up the grey areas. No workshop with business departments is needed, and nothing is changed in your environment.
This framing is what makes a fixed price and a short lead time possible, rather than an open-ended assignment nobody knows how to close. It also makes the audit well suited to remote delivery, wherever your offices are.
Pricing by estate size
The price depends on the size of the estate to inventory. The starting price shown above covers up to 15 workstations. Estates of 16 to 40 and of 41 to 75 workstations are priced in higher tiers. Beyond 75 workstations, or for multi-site set-ups, the price is on request.
Every tier includes data collection, analysis, the prioritised report, the roadmap, the findings meeting and one round of clarification on the delivered report.
How it works
Preparation: preparatory questionnaire and definition of the exact scope to inventory.
Collection: read-only scripts and administration exports, with no change to your environment.
Interview: two hours with your technical contact to clear up grey areas and check the findings.
Analysis: findings ranked by criticality and dependencies identified.
Findings meeting: presentation of the report, the roadmap and indicative budgets.
Deliverables
Audit report with findings ranked on three levels of criticality.
Inventory of the estate, backups, access and licences.
A twelve-month roadmap, prioritised and costed on an indicative basis.
An executive summary readable by non-technical management.
A findings meeting and one round of clarification on the report, within the agreed scope.
Further reading
Frequently asked questions
How is this different from the Active Directory audit? This audit sweeps across your whole IT at a high level: estate, backups, email, licences, weak points. The Active Directory audit goes deep into a single component, the directory, analysing delegations, Group Policy Objects and privileged accounts. The two complement each other: this audit tells you whether an in-depth Active Directory audit is justified for you.
Do we need to involve our business teams? No, and that is deliberate. A preparatory questionnaire and a two-hour interview with your technical contact are enough. No workshop per department is planned: that is what keeps the lead time and price predictable.
Do you touch our environment during the audit? No. Collection is read-only, based on exports and scripts that change nothing. No fix is applied without a separately approved quote.
Do you help implement the recommendations? Yes, but separately. The roadmap is costed on an indicative basis and each workstream is quoted on its own. Managing a project that comes out of the audit falls under our IT project management service. You remain free to entrust these workstreams to whoever you choose.
What does this audit not cover? Penetration testing, in-depth security audits, code or application vulnerability analysis; compliance audits, certification or attestation (ISO 27001, NIS2, GDPR); legal, tax or contractual advice and negotiation with your vendors; the choice of an ERP, CRM or business software; network audits (routing, switching, firewalls) and audits of third-party hosted infrastructure without access; fixing the findings, monitoring, day-to-day administration and user support. The audit is an obligation of means: it relies on the information provided and on what collection can observe at a given moment, and does not guarantee exhaustive findings, the absence of vulnerabilities or compliance with any framework.