Risk Analysis: We define your organisation's risk profile based on industry, data handled (e.g., Sensitive, OFFICIAL, PROTECTED), and threat landscape. 

Framework Selection: We scope the assessment to the relevant security frameworks required by your risk profile (ISM, PSPF, Essential Eight, etc.). 

Evidence Gathering: We interview staff, review processes, and analyze technical configurations across your environment. 

Maturity Scoring: We score each security domain (e.g., Identity, Data Protection, Incident Response) against the chosen framework requirements, typically using a scale (e.g., Level 0 to Level 3 or 5).  We interview staff, review processes, and analyze technical configurations across your environment. 

Detailed Maturity Report: A comprehensive document detailing your current maturity level (e.g., "Maturity Level 2.3") and identifying specific, prioritised gaps. 

Actionable Remediation Roadmap: Delivery of a phased roadmap that specifies the exact steps needed to achieve your target maturity level, focusing on the highest risk-reduction activities first.