Cybersecurity risk assessment
On-Site Cybersecurity Risk Assessment and Security Roadmap
We come to your office, find the weaknesses in your network and give you a written report with a recommendation for every risk, then a phased roadmap and timeline to fix them.
- In business since 2008
- CompTIA certified
- Office in Fremont, CA
Quick answer
A Fasthuma cybersecurity risk assessment is an on-site review of your network edge, physical security, network segmentation, Microsoft 365 and email, endpoints and sign-in, plus Wazuh vulnerability detection, using principles from the NIST framework. You get a written report pairing each risk with a recommendation, and a phased roadmap and timeline at no extra charge. Rates: $1,000/hour (up to 500 devices) or $2,500/hour (more than 500 devices).
What we assess
Every assessment is done in person. These are the areas we review:
Network edge
We check the firewall and switches for unused ports that are still enabled, look at how remote employees connect, and recommend a VPN where remote access is not secured.
Physical security
We look at where your internet modem, firewall and servers are, and whether someone could reach and tamper with them. Equipment belongs in a locked cabinet or room.
Network segmentation
Without segmentation, one compromised device can reach everything. We check whether guest and personal devices are separated from your business network.
Microsoft 365 and email
We check SPF, DKIM and DMARC records, which help stop spoofed and phishing email sent in your name, and whether OneDrive data is encrypted.
Endpoints
On every workstation we check for antivirus, regular operating system updates, local backups and BitLocker drive encryption.
Sign-in and authentication
We check whether two-factor authentication is on for every account and workstation, and where hardware security keys such as YubiKeys would help.
Vulnerability detection
We use Wazuh to help find known vulnerabilities and missing patches across your systems.
How we assess: principles from the NIST framework
Our methodology uses principles from the NIST Cybersecurity Framework, published by the U.S. National Institute of Standards and Technology. It follows a structured process:
- Identify assets. Your network equipment, servers, workstations, accounts and the data that matters most.
- Assess threats. What could realistically go wrong, from phishing to someone walking up to your server.
- Analyze vulnerabilities. The weaknesses that would let those threats succeed.
- Measure risk. How likely each one is and how much damage it could do to your operations and reputation.
- Plan mitigation. A recommendation for every risk, ranked so you know what to fix first.
After the fixes, continuous monitoring and regular reviews keep the protections working as your business changes.
What you get: the written report
- Executive summary of your current security posture, in plain language.
- Every risk we found, grouped by area, each paired with a clear recommendation.
- Next steps, so you know what happens after the report.
Included at no extra charge
Your roadmap and timeline
After the on-site assessment we turn the findings into a phased roadmap you can follow, with a timeline in weeks.
What the roadmap includes
- Phases, each with its scope, timeline and the outcome you get.
- A timeline summary of every phase on one page.
- A dependency map showing which phases must finish before others start.
- The strategy behind the order of the work.
The principles behind every roadmap
- Minimize disruption to daily operations.
- Deliver security improvements as early as possible.
- Put backups in place before major network changes.
- Validate each phase before moving to the next.
- Overlap phases where it is safe, to shorten the timeline.
- Start managed monitoring right after the project, with no gap.
- Backup and recoveryWeeks 1–2
Make sure every critical system can be restored before anything else changes.
- Critical fixesWeeks 2–4
Close exposed ports, turn on two-factor sign-in, install endpoint protection.
- Remote access and VPNWeeks 3–5
Move remote staff onto a secure VPN and retire unmanaged remote tools.
- Segmentation and Wi-FiWeeks 4–6
Separate guest and personal devices from the business network.
- Equipment refreshWeeks 5–8
Replace aging firewalls, switches, servers or workstations.
- Validate and documentWeeks 8–9
Test every change and document the final network.
- Managed securityOngoing
Monitoring, patching and security alerts continue after the project.
Pricing
What a risk assessment costs
Risk assessments are billed per hour, on site. The rate depends on the size of your network. The roadmap and timeline come with the assessment.
Small and mid-sized businesses
Up to 500 devices
$1,000 per hour, on site
Enterprise
More than 500 devices
$2,500 per hour, on site
- Roadmap and timeline included. Every risk assessment comes with a phased roadmap and timeline, delivered after the on-site visit, at no extra charge.
- Fixes and refreshes are quoted. Network security upgrades and equipment refreshes are quoted per project, from the roadmap.
- Ongoing monitoring is a monthly managed service. See the Flame, Blaze and Inferno plans on msp.fasthuma.com.
A device is anything we manage on your network: computers, laptops, servers, phones, printers and network equipment. Rates are subject to change; your rate is confirmed before any work starts.
After the roadmap
The roadmap is yours to keep. When you are ready, we carry out the work on it: network security upgrades and refreshes, then managed security to keep watch. If your cyber insurance policy has security requirements, see cyber insurance and compliance.
FAQ
Risk assessment questions
What does a cybersecurity risk assessment include?
An on-site review of your network edge (firewall, switch ports, remote access), physical security, network segmentation, Microsoft 365 and email security, endpoints (antivirus, updates, backups, BitLocker) and sign-in (two-factor authentication), plus vulnerability detection with Wazuh.
How much does it cost?
$1,000 per hour on site for businesses with up to 500 devices, and $2,500 per hour for businesses with more than 500 devices. The roadmap and timeline are included at no extra charge.
Is the roadmap and timeline extra?
No. Every risk assessment comes with a phased roadmap and timeline, delivered after the on-site visit, at no extra charge.
What framework do you use?
Our methodology uses principles from the NIST framework: identify assets, assess threats, analyze vulnerabilities, measure risk and plan mitigation.
Do you use a vulnerability scanner?
Yes. We use Wazuh to help find known vulnerabilities and missing patches as part of the assessment.
What counts as a device?
Anything we manage on your network: computers, laptops, servers, phones, printers and network equipment. Businesses with up to 500 devices pay the small and mid-sized business rate.
How do I book an assessment?
Book a free phone consultation online or call (510) 371-9468, Monday–Friday, 9 AM–5 PM. We use the call to understand your network and schedule the on-site visit.
Find out where your network stands
Book a free phone consultation to schedule an on-site cybersecurity risk assessment. You get a written report and a roadmap and timeline to fix what we find.