IT security check: close the gaps before they get expensive
A clearly defined IT security review of your entire environment with a prioritised report and a concrete action plan. Fixed price from DKK 15,000 excl. VAT, read-only access and no changes to operations.
In short
An IT security check is a clearly defined review of your company's IT security, also called cyber security, where an external specialist systematically assesses the key control areas: access management and MFA, backup and recovery, update status, firewall and network, email security, Microsoft 365 setup, employees' phishing readiness, contingency plan, supplier access and physical security.
The check uses read-only access and changes nothing in operations: the kick-off meeting takes one hour, and the technical review two to five days depending on company size. The result is a report where every finding is prioritised as Critical, High, Medium or Low, followed by a review meeting with a concrete action plan, so you know exactly what to close first. The fixed price starts at DKK 15,000 excl.
VAT for 10 to 25 users and is deducted if you later sign an operations agreement. MI Support IT has run IT security checks for Danish SMEs for more than 25 years and knows the mistakes that recur across industries.
Content
Ten control areas in the check. The breadth makes the difference, because serious incidents often start where nobody looked.
The security check covers ten control areas, and you get a status on each of them. Most serious incidents start in an area nobody looked at.
Access management and MFA
Who has access to what, and is multi-factor authentication switched on everywhere? We find shared accounts, forgotten admin rights and accounts without MFA.
Backup and recovery
Is all critical data backed up, and has recovery been tested recently? A backup that has never been restored is a hope, not a plan.
Updates and patching
Status on servers, workstations and network equipment. We map systems that are missing critical security updates.
Firewall and network
Rule sets, segmentation and ports open to the internet. We look for remote access that was never closed again.
Email security
SPF, DKIM and DMARC on your domains, plus spam filtering and rules against CEO fraud. Email is still the most common attack route.
Microsoft 365 setup
Security settings, external sharing, guest accounts and app permissions in your tenant. The default setup is rarely enough.
Employee behaviour and phishing readiness
How well does the organisation spot fraud attempts, and is there a culture of reporting? People are part of security, not a problem.
Contingency plan
Is there a plan for outages and attacks, and can it be used under pressure? We assess roles, contact routes and recovery targets.
Supplier access
Which external suppliers have access to your systems, how is that access secured, and is it logged and closed after use?
Physical security
Server rooms, access cards, printers and devices that leave the building. Physical access bypasses many technical controls.
Look up the terms in the IT glossary, such as MFA and phishing, or read how an IT contingency plan ties in with the check. Want to start somewhere today? See how to update your browser: outdated browsers are the most common finding under updates and patching.
How it works. Four steps from kick-off meeting to action plan, typically 1-2 weeks in total.
Your own time is spent only on the two meetings. The review is done with read-only access, and nothing is changed in your operations along the way.
Book your security check- 1
Kick-off meeting
1 hour: Scope, access and contact persons are agreed. You do not need to prepare documentation in advance.
- 2
Technical review
2-5 days: All ten control areas are reviewed with read-only access, and your environment is vulnerability scanned. No changes, no disruption to operations.
- 3
Report with prioritised findings
After the review: Every finding is classified as Critical, High, Medium or Low, with an explanation that both management and technicians can read.
- 4
Review meeting and action plan
1-2 hours: The report is walked through with you and turned into a concrete, prioritised action plan. You decide who does the remediation.
Price
What does an IT security check cost? A fixed price based on company size, agreed in advance.
No hourly billing, no surprises. The price depends only on the number of users, and it is deducted if you later choose an operations agreement.
From DKK 15,000
Small business
10 to 25 users
From DKK 30,000
Medium-sized business
25 to 100 users
Request a quote
Large business
100+ users
All prices are excl. VAT. If you later sign an operations agreement with us, the price of the security check is deducted in full.
Independence
Get your cyber security checked from the outside. Whoever runs the environment has blind spots. An external review sees what habit overlooks.
Whoever built and runs an IT environment has blind spots. It is not about competence but about habit: you check what you usually check. An external IT security review looks at the environment with fresh eyes and compares it with what works at other Danish SMEs.
The report also works as documentation. If you are covered by NIS2, an independent security check is a natural first step towards the risk management requirements. Several cyber insurers now require a documented security level before they issue or renew a policy. You can find the Danish authorities' recommendations for businesses at sikkerdigital.dk.
Breadth or depth
Security check vs. penetration test. The check gives you breadth across ten areas, the pentest goes deep on selected systems.
The security check is the breadth: all ten control areas are assessed, so you get an overall picture of where you stand and what is most urgent.
A penetration test is the depth: here a specialist actively tries to break into selected systems to test your defences in practice. The two complement each other. Many start with the check and use the report to decide whether a penetration test of the critical systems is the next step. Both are part of our full range of IT security services.
Frequently asked questions. Duration, operations, report content, NIS2 and price.
Ready for the overview? Book your IT security check, or call and hear what the check covers for you.
Call +45 3212 3232, or write to us. You typically get a reply the same day on weekdays, and you know the price before work starts.